nbari / backup / 27141759415

push

github

verify: detect catalog↔store drift and repair missing blobs

Add a verify command that re-checks every destination against the catalog.
run trusts the catalog when deciding what to upload, so blobs deleted directly
from a destination go unnoticed; verify reports any missing blob copies (no
secrets needed).

--repair restores missing blobs: copy from a healthy destination when one still
has the blob (key unchanged, copies stay byte-identical), else re-seal from the
source file when it is gone everywhere (fresh key, rewrite all destinations,
update the catalog key). A blob missing everywhere whose source is gone or
changed is reported as unrecoverable.

- engine/verify.rs: verify() + reseal-from-source repair, with E2E tests for
  detect / copy-repair / reseal-repair / unrecoverable / clean
- catalog: all_content_ids, update_content_key
- LocalStore::remove (idempotent), used by repair-not / tests and future prune
- CLI: verify subcommand (+ --repair), dispatch, action handler
- resolve_naming_key made pub(crate) and reused for repair unlock
- README + DESIGN checklist updated

283 of 348 new or added lines in 10 files covered. (81.32%)

3042 of 3859 relevant lines covered (78.83%)

8.67 hits per line