snapshot: preserve session hardening and account surface

backend/workflows/backup_ops.py

@@ -18,6 +18,9 @@ from django.utils.translation import gettext as _
 from .models import WorkflowConfig
 from .services import delete_from_nextcloud, upload_to_nextcloud
 
+# Backup bundles are local-first. Remote copy is a secondary delivery path and
+# must never replace the ability to verify/restore the local bundle directly.
+
 
 def _backup_root() -> Path:
     root = Path(settings.BACKUP_OUTPUT_DIR)
@@ -115,6 +118,8 @@ def list_backup_bundles() -> list[dict]:
 
 
 def latest_backup_health_snapshot(stale_after_hours: int = 48) -> dict:
+    # A single snapshot keeps the UI, scheduled command, and future monitoring
+    # on the same health contract.
     rows = list_backup_bundles()
     if not rows:
         return {
@@ -329,7 +334,7 @@ def verify_backup_bundle(backup_name: str) -> dict:
             env=env,
             text=True,
         ).strip()
-        with tempfile.TemporaryDirectory(prefix='tubco_backup_verify_media_') as tmpdir:
+        with tempfile.TemporaryDirectory(prefix='workdock_backup_verify_media_') as tmpdir:
             with tarfile.open(media_archive_path, 'r:gz') as archive:
                 archive.extractall(tmpdir, filter='data')
             media_dir = Path(tmpdir) / 'media'