restore points offered BEFORE the remove: [(None, '2026-10-01T15:30:15Z')]
remove KEEPING backups -> 200 {'ok': True, 'data': {'removed': 'karakeep', 'volumes_removed': ['karakeep_karakeep_data', 'karakeep_karakeep_meili'], 'hdd_paths_removed': [], 'hdd_paths_preserved': [], 'verified': True}, 'message': 'Stack karakeep removed'}
left after remove: nothing (containers and volumes gone)
restore: {'ok': True, 'snapshot_id': 'helyi', 'http': 'HTTP/2 302', 'seconds': 83.1, 'state_after': 'running', 'hold_after': None, 'why': None}
    karakeep: readback http=200 found=True (controls: no key 401, wrong 401, absent 404)
2.5 the seed reads back after remove + restore: True
3.4 AFTER remove + restore — a stranger, no session, through traefik:
  GET / -> 307
  users.create -> 403
  GET /signup -> 200
  the app's own switch: DISABLE_SIGNUPS=true
