=== '--verify' anywhere in controller/ (all files, incl gitignored cmd/) ===
grep-rc=1

=== POSITIVE CONTROL: '--no-lock' ===
grep-rc=1

=== every restic flag token used in internal/backup/ (non-test) ===
"--delete" "--group-by" "--ignore-existing" "--include" "--itemize-changes" "--json" "--keep-daily" "--keep-monthly" "--keep-weekly" "--mode" "--prune" "--read-data" "--remove-all" "--rm" "--tag" "--target" 
