R-1270 follow-up (found live on 9202): remove with „delete its backups too” deletes the app's restore-undo folder too — a not-started restore's kept copy outlived the remove; the wiring test also pins the D47 set-aside removal. Red-proved. Commit only.

controller/internal/backup/offbox_restore_undo.go

@@ -42,6 +42,9 @@ type liveVolumeCopy struct {
 	keep   bool     // set when a put-back could not be done: the copy is the support path back, never removed
 }
 
+// RestoreUndoDir is restoreUndoDir for the app's remove with „delete its backups too" (a kept copy goes with it).
+func RestoreUndoDir(nsRoot, stack string) string { return restoreUndoDir(nsRoot, stack) }
+
 // restoreUndoDir is where the live-volume copy of one restore lives. Under backups/ on purpose: no capture set
 // includes it (appbackup.captureset skips backups/), and backups/primary — the recovery unit — is never written.
 func restoreUndoDir(nsRoot, stack string) string {