feat: platform backbone and field capture complete (checkpoint)

Platform backbone (plan 2026-10-13-plattform-rueckgrat), all tasks reviewed:
- webhooks with delivery table, retries and stable delivery id
- calendar handlers; a finished task removes its Outlook event
- tasks, automations, inspections, varroa, treatments, feedings,
  harvests, colonies, wintering, stock and bottling record domain events
  in the same transaction; legacy post-commit calls removed
- row locks through one helper (lockRowForUpdate, lockRowsForShare,
  lockRowsForUpdate)
- job framework with JobRun, cli exit codes, cleanup, task templates,
  daily evaluation, hourly app-backup and the rekey job
- system API and page "Verwaltung > System" with retry
- @nestjs/schedule removed, guard tests against in-process schedulers

Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), all tasks reviewed:
- inspection photo offline without metadata
- bulk capture for treatments, feedings and varroa (backend + frontend)
- offline stand mode with service worker, offline pages and packs
- offline session, cold start and logout on shared devices

Docs: ARCHITECTURE.md assumptions and sections updated, TASKS.md.
Gates: backend lint, typecheck, 1770 unit, 420 e2e, build, no schema
drift; frontend lint, typecheck, 913 tests, build. Not rolled out.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/backup/backup.controller.spec.ts

@@ -11,7 +11,8 @@ describe('BackupController', () => {
   const originalLimit = process.env.BACKUP_MAX_IMPORT_BYTES;
   let controller: BackupController;
   let backupService: { importFile: jest.Mock; exportSealed: jest.Mock };
-  let scheduler: { reload: jest.Mock };
+  let scheduler: Record<string, never>;
+  let settings: { update: jest.Mock };
   let reauth: { verify: jest.Mock };
   const actor = { id: 'admin-1' } as AuthenticatedUser;
   const file = {
@@ -28,12 +29,13 @@ describe('BackupController', () => {
         ciphertext: 'x'.repeat(2000),
       }),
     };
-    scheduler = { reload: jest.fn().mockResolvedValue(undefined) };
+    scheduler = {};
+    settings = { update: jest.fn() };
     reauth = { verify: jest.fn().mockResolvedValue(undefined) };
     controller = new BackupController(
       backupService as unknown as BackupService,
       scheduler as unknown as BackupSchedulerService,
-      {} as BackupSettingsService,
+      settings as unknown as BackupSettingsService,
       reauth as unknown as ReauthService,
     );
   });
@@ -46,23 +48,29 @@ describe('BackupController', () => {
     }
   });
 
-  it('re-registers the backup schedule after an import, since it may restore other backup settings', async () => {
-    await controller.import(file, { password: 'secret' }, actor);
-
-    expect(backupService.importFile).toHaveBeenCalledTimes(1);
-    expect(scheduler.reload).toHaveBeenCalledTimes(1);
-    expect(scheduler.reload.mock.invocationCallOrder[0]).toBeGreaterThan(
-      backupService.importFile.mock.invocationCallOrder[0],
-    );
-  });
-
-  it('leaves the schedule alone when the import fails', async () => {
-    backupService.importFile.mockRejectedValue(new Error('broken file'));
-
+  // The app-backup job reads the settings on every run, so nothing in the
+  // API has to be told about a restore or a settings change. The scheduler
+  // double has no methods: any call on it fails these tests.
+  it('imports without touching the schedule', async () => {
     await expect(
       controller.import(file, { password: 'secret' }, actor),
-    ).rejects.toThrow('broken file');
-    expect(scheduler.reload).not.toHaveBeenCalled();
+    ).resolves.toEqual({ imported: {}, skipped: [] });
+
+    expect(backupService.importFile).toHaveBeenCalledTimes(1);
+  });
+
+  it('saves settings without touching the schedule', async () => {
+    const saved = { id: 'singleton', cronSchedule: '0 4 * * *' };
+    settings.update.mockResolvedValue(saved);
+
+    await expect(
+      controller.updateSettings({ cronSchedule: '0 4 * * *' }, actor),
+    ).resolves.toBe(saved);
+
+    expect(settings.update).toHaveBeenCalledWith(
+      { cronSchedule: '0 4 * * *' },
+      'admin-1',
+    );
   });
 
   describe('export', () => {