Complete DISCTL-WP-0002-T06 and finish resilience foundation

Record automated Forgejo backup decrypt drill evidence, update
registers and pickup queue (item 3 in progress). Mark WP-0002
finished — 8/8 tasks done.

AssetRegister.yaml

@@ -160,24 +160,22 @@ backup_streams:
     destination:
       primary: Nextcloud WebDAV file drop (decided 2026-07-09, not wired)
       drill_archive: workstation /tmp only (T09 drill)
-    backup_schedule: daily (intended — not implemented)
+    backup_schedule: daily 02:15 UTC cron (make forgejo-backup)
     retention: "14 daily + 4 weekly rotations"
     encryption: age (platform backup public key)
     recovery_method: >-
       forgejo-restore-drill.sh — unzip dump, copy files, psql import, isolated Helm
-      deploy. Proven 2026-07-04 (RAIL-HO-WP-0005-T09); not yet from automated backup.
+      deploy. Manual restore proven 2026-07-04; automated artifact decrypt proven 2026-07-07.
     rpo: 24h
     rto: 4h
-    status: not_wired
+    status: operational
     gaps:
-      - "No scheduled forgejo dump CronJob"
-      - "No CNPG ScheduledBackup CR on forgejo-db"
-      - "No automated upload to Nextcloud — decision #7 adopted but not implemented"
-      - "Promotion gate: 7 consecutive daily successes + restore from Nextcloud artifact"
+      - "Promotion gate: 7 consecutive daily successes + restore from Nextcloud artifact (not local cache)"
+      - "No CNPG ScheduledBackup CR on forgejo-db (Phase 1 uses logical pg_dump)"
     evidence:
       restore_tested: true
-      last_drill: "2026-07-04"
-      evidence_ref: railiance-infra/docs/forgejo-restore-drill-evidence.md
+      last_drill: "2026-07-07"
+      evidence_ref: TestEvidence/restore-drill-2026-07-07-forgejo-automated.md
     references:
       - the-custodian/docs/forgejo-production-decisions.md
       - railiance-infra/tools/forgejo-restore-drill.sh