R-1278: the install page says when a backup of an earlier install is kept and links the restore page (HU and EN). Red-proved. Commit only.

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 **MinAgent: 0.158.1** (unchanged). The hold acts only on a box whose agent reports `waiting_for_quiet` (≥ 0.165.0).
 
+### The install page says when a backup of an earlier install is kept (R-1278, P3)
+
+- `internal/web/handlers.go` + `templates/deploy.html`: for an app not installed, when the box keeps a backup of an
+  earlier install (`backup.KeptBackupsFor`: its set-aside units, D47, and the unit „remove — keep backups" left), an
+  info notice says the new install starts empty and links „A megőrzött mentések megnyitása" (`/backups/restore`). HU and
+  EN keys `deploy.kept_backup_offer{,_link}`; the hidden case renders byte for byte as before (the parity fixtures
+  unchanged); a new parity case `deploy_new_kept_backup_r1278`. Tests: `TestR1278_*` (render per branch, the wiring, the
+  count). Red-proof: felhom.eu `documentation/audits/night-2026-10-25/redproof-r1278.txt`.
+
 ### FileBrowser is off the app network: only traefik (and a linked OnlyOffice) reach it (R-1281, P2, D44 #23)
 
 - **Measured before** (the night's rig, 0.344.0-rc.2): from the qBittorrent and Transmission containers (on
@@ -13,6 +22,8 @@
   login was refused (R-1126's gate, unchanged) — never traefik-public any more; one an earlier controller put on
   traefik-public leaves it. OnlyOffice joins `felhom-files` while — and only while — its FileBrowser link is on (it
   fetches and saves documents at `http://filebrowser:80`, R-1018) — the one stated exception. The route stays by name.
+- **On the release every box re-creates FileBrowser once** (its rendered compose changed — a comment); files.<domain>
+  is away for a few seconds, then served on the files network (seen on the night's rig).
 - Tests: `TestR1281_*` (three) + the two R-1126 gate tests updated to the files network. Red-proofs: felhom.eu
   `documentation/audits/night-2026-10-25/redproof-r1281.txt`.