it is risen - add restore progress and backup/restore history

The watcher scripts now write live status and append-only run history onto the shared volume; the api exposes them via /shopdbbackups/status and /history. The restore modal shows an indeterminate spinner with phase labels, and two cards list backup and restore run records. Timestamps render in UTC to match the Zulu-stamped set ids, the history directory is excluded from the set list, and a stale-status guard stops a previous run's done phase from collapsing the spinner on the next restore.

scripts/backup/watch.sh

@@ -19,6 +19,9 @@ INTERVAL="${BACKUP_POLL_SECONDS:-10}"
 
 log() { echo "[backup-watch] $*"; }
 
+# shellcheck source=scripts/backup/status.sh
+. /opt/backup/status.sh
+
 mkdir -p "${BACKUPS_ROOT}"
 # The api container runs unprivileged and only drops sentinel files here; it
 # cannot write into a root-owned 0755 directory. Make the backups root
@@ -29,6 +32,7 @@ log "watcher up; polling ${SENTINEL} and ${RESTORE_SENTINEL} every ${INTERVAL}s"
 while true; do
 	if [ -f "${SENTINEL}" ]; then
 		log "backup requested - running one-shot"
+		status_write backup queued "" "Backup queued"
 		if /opt/backup/backup.sh; then
 			log "backup completed"
 		else
@@ -45,6 +49,7 @@ while true; do
 		# fails so a bad set cannot pin the watcher in a tight retry loop.
 		setname="$(head -n1 "${RESTORE_SENTINEL}" 2>/dev/null | tr -d '\r\n')"
 		log "restore requested - running restore for ${setname}"
+		status_write restore queued "${setname}" "Restore queued"
 		if /opt/backup/restore.sh "${setname}"; then
 			log "restore completed"
 		else