feat(ops): add integrity-checked backups and isolated restore drills

docs/testing/news-e2e.md

@@ -34,4 +34,3 @@ No authentication, application HTTP responses, mutations, database calls or cach
 This browser gate checks the synchronous editor/publication path and durable delivery intent. Scheduler concurrency, rollback, duplicate requests, worker delivery and Redis outage/recovery remain covered by `pnpm test:integration`. It does not claim to test emulator connectivity, external notifications, CAPTCHA/2FA challenges or production data.
 
 The local workstation currently has no working Docker daemon. Type checks, lint and fixture/bootstrap checks can run there; a passing real browser result must come from the Docker-capable CI gate.
-