feat: enable daily CNPG Option A backup on railiance01

Wire worker kubeconfig hostPath (no PATH override), enable
daily-cnpg-option-a-backup for R01 targets, ESO already synced.

activity-definitions/daily-cnpg-option-a-backup.md

@@ -1,7 +1,7 @@
 ---
 id: daily-cnpg-option-a-backup
 name: Daily CNPG Option A Backup
-enabled: false
+enabled: true
 owner: custodian-agent
 governance: custodian
 status: active
@@ -18,8 +18,11 @@ context_sources:
       backup_script: /opt/railiance-platform/tools/cmd/cnpg-option-a-backup
       dry_run: false
       timeout_seconds: 7200
+      # worker-writable cache
+      # (CLI defaults to /tmp if HOME unwritable)
       kubeconfig_r01: /kube/config-hosteurope
       kubeconfig_core: /kube/config
+      targets: r01-forgejo-db,r01-net-kingdom-pg,r01-state-hub-db
       evidence_sinks:
         - type: state-hub-progress
           event_type: cnpg_option_a_backup