Add owner-only room backup snapshots and audited exports

drizzle/0017_admin_room_backups.sql

@@ -0,0 +1,15 @@
+CREATE TABLE `admin_room_backups` (
+  `operation_id` text PRIMARY KEY NOT NULL,
+  `actor_admin_id` text NOT NULL,
+  `room_code` text NOT NULL,
+  `request_hash` text NOT NULL,
+  `room_version` integer NOT NULL,
+  `created_at` integer NOT NULL,
+  `size_bytes` integer NOT NULL,
+  `digest` text NOT NULL,
+  `payload` text NOT NULL,
+  `reason` text NOT NULL,
+  CONSTRAINT `admin_room_backups_size` CHECK (`size_bytes` BETWEEN 1 AND 1800000 AND `size_bytes` = length(CAST(`payload` AS BLOB)))
+);
+--> statement-breakpoint
+CREATE INDEX `admin_room_backups_room` ON `admin_room_backups` (`room_code`,`created_at`);

drizzle/0018_admin_backup_downloads.sql

@@ -0,0 +1,9 @@
+CREATE TABLE `admin_room_backup_downloads` (
+  `download_id` text PRIMARY KEY NOT NULL,
+  `operation_id` text NOT NULL,
+  `actor_admin_id` text NOT NULL,
+  `room_code` text NOT NULL,
+  `created_at` integer NOT NULL
+);
+--> statement-breakpoint
+CREATE INDEX `admin_room_backup_downloads_room` ON `admin_room_backup_downloads` (`room_code`,`created_at`);

drizzle/meta/_journal.json

@@ -120,6 +120,20 @@
       "when": 1790395696065,
       "tag": "0016_seat_discussion_controls",
       "breakpoints": true
+    },
+    {
+      "idx": 17,
+      "version": "6",
+      "when": 1790640000000,
+      "tag": "0017_admin_room_backups",
+      "breakpoints": true
+    },
+    {
+      "idx": 18,
+      "version": "6",
+      "when": 1790640001000,
+      "tag": "0018_admin_backup_downloads",
+      "breakpoints": true
     }
   ]
 }