v0.307.0: after a restart the Databases table lists each database once, not every pre-restore undo copy

Seen on demo-hp 2026-10-10 (adventurelog x4, bookstack x4). The synthesised run skips IsUndo files; only undo copies
-> no synthesised run. Two tests, both red-proved. v0.306.0 (R-570) was built but never delivered; 0.307.0 carries it.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -1,6 +1,19 @@
+## v0.307.0 — after a restart the Databases table lists each database once, not every undo copy (2026-10-10)
+
+**MinAgent: 0.131.0** (unchanged — no agent call changed). Carries v0.306.0 (R-570). Released 2026-10-10 alone (no hub
+change).
+
+- **Backup → Apps „Databases": one row per database after a controller restart.** SEEN 2026-10-10 on demo-hp's household
+  guest (0.305.0, while retaking the website pictures, R-910): adventurelog four rows, bookstack four rows, every one
+  stamped with the night's time. Cause: after a restart the last run's result is not in memory, so `GetFullStatus`
+  SYNTHESISES it from the dump files on disk — and listed every `pre-restore-` undo copy (R-379) as one more row of the
+  run. Now the synthesis skips undo copies (they stay in the file list below, as R-379 decided), and with only undo
+  copies on disk there is no synthesised run at all. Tests `TestSynthesisedRunListsNoUndoCopy` (the measured shape;
+  RED before: 5 rows for 2 databases) and `TestSynthesisedRunAbsentWhenOnlyUndoCopies` (RED with the guard removed).
+
 ## v0.306.0 — the off-site note decides on its kind only; the pre-0.251.0 text fallback is gone (R-570) (2026-10-10)
 
-**MinAgent: 0.131.0** (unchanged — no agent call changed). Released 2026-10-10 alone (no hub change).
+**MinAgent: 0.131.0** (unchanged — no agent call changed). **Built and pushed to the registry, NEVER delivered** — superseded the same afternoon by v0.307.0, which carries this change too.
 
 - **R-570 — the legacy text fallback in `offboxWarningDisplay` is deleted** (`internal/web/handlers.go`), with its
   constant `offboxStaleWarningMarker`. It existed only for a box whose last off-site run predated v0.251.0 and so