docs: v0.124.0 backups IA restructure — CHANGELOG + REPORT + CONTEXT (decisions 1-3) + README page map + REUSE; records the HIGH containerized-.fab volume-strand finding and the agent SystemDisks legacy-boot finding

Claude-Session: https://claude.ai/code/session_01GzammAMzsJTgpQHqxwM2bC

CONTEXT.md

@@ -7,7 +7,22 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-13 (v0.123.0 — polish batch)
+Last updated: 2026-07-13 (v0.124.0 — backups IA restructure)
+
+> **2026-07-13 — v0.124.0: BACKUPS IA RESTRUCTURE. MinAgent 0.81.0 + floor unchanged.
+> Operator decisions (2026-07-13, treat as settled):** (1) single active offsite destination per
+> box STANDS — the dual-destination `managed_by` model is the separate queued Task B;
+> (2) the Felhom-offsite status card NEVER changes anything — display + opt-in pointers only;
+> (3) .fab export/download is PORTABILITY, not a backup tier — no scheduling, no status surface,
+> point-in-time framing. Mechanics: four sub-pages (`/backups{,/remote,/apps,/restore}`, sections
+> moved VERBATIM — `scripts/backups_split_move_check.py` gates vs df7ad37), status card (3 states,
+> display-only), .fab download exit (existing exporter + staging dir + guarded stream + 1h TTL;
+> traversal guard red-proven). Live-validated on drill+demo incl. a supervised import round-trip.
+> **NEW FINDINGS:** **(HIGH)** containerized .fab export strands Docker-VOLUME tars on the guest
+> host (`docker run -v <container-tmp>` → host path) — bundle ships empty volumes, import brings
+> the app up EMPTY; fix = host-visible staging + fail-loud post-export assertion. **(MEDIUM,
+> agent)** legacy-boot PVE (LVM root, no ESP mount) → SystemDisks empty → sysKnown=false → drive
+> wizard offers ZERO candidates ever. Follow-ups: .fab browser-upload; mega-zip parked.
 
 > **2026-07-13 — v0.123.0: POLISH BATCH (take-two F-15/F-11 + rename + zero-toggle). MinAgent
 > 0.81.0 unchanged; floor 0.122 unchanged. Requires hub v0.52.0 for F-15 (old hub = clean no-op).**