Add backups with S3, daily cost push, automation templates and a browser tool

- Daily backups (database + config) into <data_dir>/backups, keep N,
  optional upload to any S3-compatible bucket (SigV4, bucket pruning);
  settings panel with run-now, list and download
- Daily cost summary push at 20:00 (opt-in per user, preview button)
- Automations from templates (dependency check, security review, test
  health, daily summary, TODO report, docs freshness) via POST /jobs/create
- browser tool: headless Chromium over CDP – click, type, keys, waits,
  JavaScript, navigation, screenshots, console errors; requests to private
  network addresses are blocked (sub-resources and redirects included)
- Secrets masked in the config view: S3 secret key, metrics token
- Replace the remaining text arrows/refresh glyphs with SVG icons

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/src/main.rs

@@ -3,9 +3,11 @@
 mod api;
 mod app;
 mod auth;
+mod backup;
 mod cli_api;
 mod budget;
 mod config;
+mod digest;
 mod docs;
 mod export;
 mod files;
@@ -64,6 +66,8 @@ async fn main() -> Result<()> {
     jobs::spawn_scheduler(app.clone());
     update::spawn_checker(app.clone());
     health::spawn_checker(app.clone());
+    digest::spawn(app.clone());
+    backup::spawn(app.clone());
     let router = api::router(app);
     let listener = tokio::net::TcpListener::bind(&bind).await?;
     tracing::info!("listening on http://{bind}");