Windows backup auditing toolkit — Windows Server Backup, VSS snapshot monitoring, backup job verification, and recovery point tracking

ByKA disaster-recovery backup. Captures secrets, MCP configs, Claude Code state, OAuth tokens, and environment snapshot to an encrypted-USB-ready directory. Three-tier scope (P1 critical / P2 full functionality / P3 environment). Auto-cleans backups older than -KeepDays. Operator-workstation only. Extracted from byka master in M-13 Phase 3 Wave E.