feat: Datenmodell Sprachnotizen (T7 L2 Task 4)

VoiceCapture und VoiceCaptureAudio nach Spec §3 mit CHECKs
(audioBytes 1..2 MiB, durationSec 1..240, CONFIRMED genau mit
inspectionId, audioMime nur bei AUDIO), Recht voice-captures:use für
ADMIN, BEEKEEPER und STAFF, Sperrreihenfolge mit VoiceCapture am Ende,
Ausschluss aus dem Backup mit Begründung, Wächter gegen Suche und
Export.

Refs #27

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/backup/backup.service.spec.ts

@@ -1536,6 +1536,20 @@ describe('BackupService', () => {
       );
     });
 
+    it('excludes VoiceCapture and VoiceCaptureAudio with a reason', async () => {
+      const bundle = await service.exportAll();
+
+      for (const [model, key] of [
+        ['VoiceCapture', 'voiceCapture'],
+        ['VoiceCaptureAudio', 'voiceCaptureAudio'],
+      ] as const) {
+        expect(bundle.data).not.toHaveProperty(key);
+        expect(MODELS_EXCLUDED_FROM_BACKUP[model]).toMatch(
+          /ephemeral, personal data, not deliverable after a restore/,
+        );
+      }
+    });
+
     it('restores phenology reports after the apiaries, remapping a user that does not exist', async () => {
       await importData({
         apiary: [{ id: 'apiary-1' }],

ApiCore-Backend/src/backup/backup.service.ts

@@ -158,6 +158,10 @@ export const MODELS_EXCLUDED_FROM_BACKUP: Readonly<
   NotificationDelivery:
     'Delivery queue - restoring it would resend old messages.',
   TelegramPollState: 'Update offset and poll lease of this deployment.',
+  VoiceCapture:
+    'Voice notes are ephemeral, personal data, not deliverable after a restore (content is deleted after at most 7 days).',
+  VoiceCaptureAudio:
+    'Encrypted audio of voice notes: ephemeral, personal data, not deliverable after a restore.',
 };
 
 const DOCUMENT_ENTITY_TYPES = new Set<string>(