feat: platform backbone and field capture complete (checkpoint)

Platform backbone (plan 2026-10-13-plattform-rueckgrat), all tasks reviewed:
- webhooks with delivery table, retries and stable delivery id
- calendar handlers; a finished task removes its Outlook event
- tasks, automations, inspections, varroa, treatments, feedings,
  harvests, colonies, wintering, stock and bottling record domain events
  in the same transaction; legacy post-commit calls removed
- row locks through one helper (lockRowForUpdate, lockRowsForShare,
  lockRowsForUpdate)
- job framework with JobRun, cli exit codes, cleanup, task templates,
  daily evaluation, hourly app-backup and the rekey job
- system API and page "Verwaltung > System" with retry
- @nestjs/schedule removed, guard tests against in-process schedulers

Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), all tasks reviewed:
- inspection photo offline without metadata
- bulk capture for treatments, feedings and varroa (backend + frontend)
- offline stand mode with service worker, offline pages and packs
- offline session, cold start and logout on shared devices

Docs: ARCHITECTURE.md assumptions and sections updated, TASKS.md.
Gates: backend lint, typecheck, 1770 unit, 420 e2e, build, no schema
drift; frontend lint, typecheck, 913 tests, build. Not rolled out.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

ApiCore-Backend/src/jobs/app-backup.job.ts

@@ -0,0 +1,21 @@
+import { Injectable } from '@nestjs/common';
+import { BackupSchedulerService } from '../backup/backup-scheduler.service';
+import { Job, JobResult } from './job';
+import { JobName } from './job-names';
+
+/**
+ * The hourly CronJob check of the automatic backup: writes a backup only if
+ * the schedule (env or GUI, Europe/Berlin) says one is due. Without a
+ * configured path it succeeds without writing; a failed backup fails the
+ * run, which notifies the holders of backup:configure.
+ */
+@Injectable()
+export class AppBackupJob implements Job {
+  readonly name: JobName = 'app-backup';
+
+  constructor(private readonly scheduler: BackupSchedulerService) {}
+
+  run(): Promise<JobResult> {
+    return this.scheduler.runIfDue();
+  }
+}