slice 8B (agent half): /backup/due cadence policy + /backup/status phases (v0.11.0)

internal/localapi: real /backup/due (cadence; due when no successful backup or
newest older than backup.backup_cadence_seconds; false in-window after success;
failed doesn't count) + /backup/status phases (idle|running|done|failed + job
id) + POST /backup single-flight with job id. Drives the controller quiesce loop.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

cmd/felhom-agent/main.go

@@ -40,7 +40,7 @@ import (
 
 // version is the agent version. Overridable at build time with
 // -ldflags "-X main.version=<v>"; defaults to the in-repo CHANGELOG version.
-var version = "0.10.0"
+var version = "0.11.0"
 
 func main() {
 	var (
@@ -485,14 +485,15 @@ func buildLocalAPIServer(cfg config.Config, px *proxmox.Client, store *backup.St
 	logger.Info("local-api leaf ready", "fingerprint_sha256", fp, "cert", cfg.LocalAPI.CertPath())
 	runner := backup.NewBackupRunner(px, cfg.Backup.LocalBackupTarget, "", "felhom local-api", logger)
 	srv, err := localapi.NewServer(localapi.Options{
-		ListenAddr: cfg.LocalAPI.ListenAddr,
-		Cert:       cert,
-		Guests:     px,
-		Backups:    runner,
-		Store:      store,
-		Storage:    observer,
-		Tokens:     tokens,
-		Logger:     logger,
+		ListenAddr:    cfg.LocalAPI.ListenAddr,
+		Cert:          cert,
+		Guests:        px,
+		Backups:       runner,
+		Store:         store,
+		Storage:       observer,
+		Tokens:        tokens,
+		BackupCadence: cfg.Backup.BackupCadence(),
+		Logger:        logger,
 	})
 	if err != nil {
 		logger.Warn("daemon: local-api disabled (server build)", "err", err)