Add Burstable CPU/memory requests and relax liveness/readiness probes so
pg_dump and forgejo-backup I/O no longer trip :8000 health checks on the
~4Gi railiance01 node (was BestEffort with 5 probe-driven restarts).
Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery
escrow at platform/workloads/railiance/backup/offsite-lane. Apply read
policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup
to load credentials from OpenBao when env is unset.