Postgres Backups

One --exclude-table-data flag shrinks this nightly Postgres backup; a separate R2 lifecycle rule keeps it a year

Munchable's nightly GitHub Actions job writes a full dump kept about 30 days plus a catalogue-free core dump kept a year. The preflight that fixed its first failure reads only the host and port out of the connection secret.