Add backups with S3, daily cost push, automation templates and a browser tool

- Daily backups (database + config) into <data_dir>/backups, keep N,
  optional upload to any S3-compatible bucket (SigV4, bucket pruning);
  settings panel with run-now, list and download
- Daily cost summary push at 20:00 (opt-in per user, preview button)
- Automations from templates (dependency check, security review, test
  health, daily summary, TODO report, docs freshness) via POST /jobs/create
- browser tool: headless Chromium over CDP – click, type, keys, waits,
  JavaScript, navigation, screenshots, console errors; requests to private
  network addresses are blocked (sub-resources and redirects included)
- Secrets masked in the config view: S3 secret key, metrics token
- Replace the remaining text arrows/refresh glyphs with SVG icons

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/i18n/en.ts

@@ -462,6 +462,34 @@ export const en = {
   "sidebar.moveHintExisting": "Existing folders: {folders}. Type one of them or a new name.",
   "sidebar.folderName": "Folder name",
   "sidebar.move": "Move",
+  "backup.now": "Back up now",
+  "backup.running": "Backing up…",
+  "backup.created": "Backup {file} created.",
+  "backup.s3Failed": "Backup created, but the S3 upload failed",
+  "backup.daily": "Automatic daily backup",
+  "backup.at": "at",
+  "backup.oclock": "o'clock",
+  "backup.keep": "keep",
+  "backup.s3": "Copy to an S3 bucket (optional)",
+  "backup.s3Hint": "Any S3-compatible storage works (AWS, MinIO, Garage, Backblaze B2, Hetzner …). Keys may be ${ENV} references. The backup contains the config with API keys – use a private bucket.",
+  "backup.endpoint": "Endpoint",
+  "backup.region": "Region",
+  "backup.bucket": "Bucket",
+  "backup.prefix": "Prefix",
+  "backup.accessKey": "Access key",
+  "backup.secretKey": "Secret key",
+  "backup.secretStored": "stored – leave empty to keep",
+  "backup.s3Keep": "Keep in bucket (0 = all)",
+  "backup.last": "Last backup",
+  "backup.s3Ok": "uploaded",
+  "jobs.fromTemplate": "New automation from a template",
+  "jobs.tplName": "Name",
+  "jobs.tplProject": "Project folder",
+  "jobs.tplSchedule": "When",
+  "jobs.tplCronHint": "Cron: minute hour day month weekday (server time zone).",
+  "jobs.tplMode": "Mode",
+  "jobs.tplPrompt": "Task for the agent",
+  "jobs.tplCreate": "Create automation",
   "new.title": "New session",
   "new.directory": "Project directory",
   "new.up": "Up",
@@ -569,6 +597,8 @@ export const en = {
   "settings.notifications": "Notifications",
   "settings.notificationsEnable": "Enable",
   "settings.notificationsOn": "Enabled",
+  "settings.digest": "Daily cost summary at 20:00",
+  "settings.digestNow": "Send today's summary now",
   "settings.pushTest": "Send test",
   "settings.pushTestSent": "Test notification sent",
   "settings.pushTestNone": "No device subscribed",
@@ -701,6 +731,7 @@ export const en = {
 
   "common.ok": "OK",
   "common.cancel": "Cancel",
+  "common.refresh": "Refresh",
   "nav.logout": "Sign out",
   "login.username": "Username",
   "login.password": "Password",