Offsite tier policy engine: mandatory userdata, raw-data quota, restore rework (Task 3a, v0.134.0)

Each toggled app's offsite push = one multi-path restic snapshot (recovery unit + TierOffsite
mandatory userdata via ComputeCaptureSet); legacy/undeployed stay unit-only. Loud capture gaps
(SP-3.4: restic 0.14.0 silently skips missing paths). Quota = stats --mode raw-data (SP-1;
displayed size drops once). Pre-push enlargement gate blocks the userdata enlargement over-quota
(unit-only push continues; EnlargedBlocked; edge-triggered notify). forget --group-by host,tags
on both sites (SP-2). Restore reworked: scratch off the rootfs + headroom gate (F-A1), unit-only
default via --include, size-first full, place-to-live missing-only merge (never --delete).
UI: unit/full-two-step/place actions + per-app blocked note; route POST /backup/offbox/place.
HUB FLAG: offbox_enlarge_blocked event needs hub allowlist for push delivery.
+13 tests; all 10 §10 red-proofs verified. No tier-2/.fab/hub/agent changes.

controller/cmd/controller/main.go

@@ -21,6 +21,7 @@ import (
 
 	"gitea.dooplex.hu/admin/felhom-controller/internal/agentapi"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/api"
+	"gitea.dooplex.hu/admin/felhom-controller/internal/appbackup"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/appexport"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/assets"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/backup"
@@ -576,6 +577,14 @@ func main() {
 					"a NAS-ra mentés hibázott ("+dur.Round(time.Second).String()+"): "+err.Error())
 			}
 		})
+		// 3a: the pre-push enlargement gate blocked an app's userdata push (config+DB still saved). Edge-
+		// triggered by the engine (only NEW blocks notify), so the hub's per-event-type cooldown suffices —
+		// no controller-side timer (the hub owns cooldown).
+		backupMgr.SetOffboxEnlargeBlockedNotifier(func(stack string, estBytes int64, usedGB, quotaGB int) {
+			notifier.NotifyOffboxEnlargeBlocked(fmt.Sprintf(
+				"A(z) %s teljes távoli mentése (~%s) túllépné a tárhelykeretet (%d/%d GB). A konfiguráció és az adatbázis továbbra is mentésre kerül; nagyobb kerethez vedd fel velünk a kapcsolatot.",
+				stack, appbackup.HumanizeBytes(estBytes), usedGB, quotaGB))
+		})
 		sched.Daily("offbox-backup", "04:15", func(ctx context.Context) error {
 			t := sett.GetOffboxTarget()
 			if t == nil || !t.Enabled || t.Schedule != "daily" || !backupMgr.OffboxConfigured() {