Daily 'forgejo dump' (tar.zst) to /opt/backups/forgejo with 14-day retention,
via a oneshot service + timer. Maintenance section now documents both backup
layers (Codeberg push-mirror for git, dump timer for full state).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>