- pg_dump + B2 (S3-compatible) upload with retention-based pruning
- litellm backup job is suspended: the nxtgauge-ai postgres instance
currently has a corrupt litellm database catalog file, un-suspend
once that's fixed/reinitialized
- secrets encrypted with sops per repo convention (.sops.yaml)
- not yet wired into kustomizations; apps/postgresql is not part of
the Flux-applied tree today (statefulset.yaml predates this and is
also unwired) - needs a deliberate decision on how postgres is
meant to be deployed/applied before enabling
