D47 follow-up: a set-aside tells the operator once (backup_run_failures, leg unit-set-aside, both identities, own run id). Red-proved. Commit only.

controller/internal/backup/backup.go

@@ -248,6 +248,9 @@ type Manager struct {
 	imagePresentFn           func(ref string) bool
 	imagePullFn              func(ctx context.Context, ref string) (string, error)
 	restorePullRefusedNotify func(stack, ref string, cause error)
+	// unitSetAsideNotify (D47 follow-up, brief 2026-10-26 Part 5.2): one operator line when a box sets an earlier
+	// install's unit aside — so a household's set-aside after the floor is visible to the operator.
+	unitSetAsideNotify func(stack, unitID, liveID, dest string)
 
 	// R-403 unit-REHYDRATE seam — the copy that refills the primary unit from the Tier-2 mirror after
 	// a restore, overridable so the "only when hollow" condition and the byte-identical non-effect are