docs: v0.109.1 README + REPORT (SLICE 4 deployed + live-verified)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

controller/README.md

@@ -746,6 +746,17 @@ not just those with HDD data. Non-HDD apps can configure destination, method, an
 >   target. Image: `restic` + `openssh-client` (re-added; restic's sftp backend shells out to `ssh`).
 > - UI: the "Külső (NAS) mentés" section on the backups page (configure target, per-app toggles, run-now,
 >   restore, status). Config: `settings.OffboxTarget` + per-app `AppBackupPrefs.Offbox`. Daily at 04:15.
+> - **Soft quota (v0.109.x, SLICE 4; pairs with hub v0.41.0).** The shared-model quota (`quota_gb`) rides
+>   the descriptor into `OffboxTarget.QuotaGB` (0 = no limit — dedicated boxes are Hetzner-enforced; the
+>   hash includes it, so a hub-side quota change re-applies via key-auth-first, no password consumed).
+>   `RepoSizeBytes` persists from `restic stats` (last-known on failure — stale-but-safe). Pre-run gate:
+>   **≥100% refuses NEW backup runs** (Hungarian error + operator alert) but the **prune step still runs**
+>   (the only way back under quota) and **restore is never gated**; ≥80% sets a Hungarian usage warning.
+>   `/backups` shows a usage bar when quota>0. The hub report carries
+>   `offsite:{enabled, escrow_state, last_run, last_status, snapshot_count, repo_size_bytes, quota_gb}` —
+>   the hub's OffsiteChecker alerts on fill (90/95%) and staleness (escrowed + no run >48h); the Hetzner
+>   `readonly` freeze is an OPERATOR lever on the hub (never automatic). A RE-apply preserves the existing
+>   target's EscrowState + runtime status (v0.109.1 — custody tracks the preserved repo password).
 > - **Hub-driven provisioning apply-bridge (v0.106.x, SLICE 2; pairs with hub v0.38.x — validated live
 >   2026-07-09).** When the hub provisions the offsite tier (a Hetzner Storage Box sub-account or dedicated
 >   box), the served `controller.yaml` gains an `offsite:` section (host/user/port/repo_path/quota_gb +