Include user-engine in offsite CNPG backups

docs/cnpg-option-a-backup.md

@@ -10,6 +10,10 @@ Logical `pg_dump -Fc` → age encrypt → Nextcloud WebDAV for production-of-rec
 CNPG databases on **CoulombCore** and **railiance01**. Emits JSON for
 activity-core evidence sinks.
 
+The railiance01 target set includes the stateful `user-engine-pg/user_engine`
+portal database. Its in-cluster daily backup provides fast operational
+recovery; this Option A copy supplies the separate encrypted failure domain.
+
 Inventory: `railiance-apps/docs/cnpg-backup-topology-inventory.md`.
 
 ## Operator commands

tools/cmd/cnpg-option-a-backup

@@ -52,6 +52,7 @@ DEFAULT_TARGETS=(
   "r01-forgejo-db|KUBECONFIG_R01|databases|forgejo-db|forgejo"
   "r01-net-kingdom-pg|KUBECONFIG_R01|databases|net-kingdom-pg|interhub,privacyidea_db"
   "r01-state-hub-db|KUBECONFIG_R01|databases|state-hub-db|state_hub"
+  "r01-user-engine-pg|KUBECONFIG_R01|user-engine|user-engine-pg|user_engine"
 )
 
 if [[ -n "${CNPG_BACKUP_TARGETS:-}" ]]; then