chore(migrations): renumber 108_add_backup_paths to 109 to avoid upstream collision

upstream/beta independently shipped 108_seed_sl_email_template_translations.js
(Slovenian email template translations) using the migration number
this branch had already claimed for 108_add_backup_paths.js. Knex's
filename-based ordering would have caused both to attempt the slot
at merge time.

Renamed via `git mv` so file history is preserved. All five
references updated in lockstep:
  - backend/src/services/_backupPathsBoot.js (require + comments)
  - backend/src/services/backupService.js (LEGACY_BACKUP_PATHS comment)
  - 3 integration test files (require + "migration 108" prose)
  - migration's own header comment, with a paragraph explaining the
    rename so reviewers don't wonder why the number jumped

**No data-migration impact for installs that already ran the
108-named version** (Ralf's beta, primarily): the migration's body
is idempotent — createTable is guarded by `hasTable`, and the seed
uses `onConflict('path').ignore()`. So when 109 runs against an
install whose backup_paths table is already populated, both the
schema step and the seed step no-op cleanly. The orphaned
`108_add_backup_paths.js` row in the `migrations` tracking table
sits harmlessly alongside the new `109_add_backup_paths.js` row.

No data lost, no double-insert, no schema drift. Mechanical rename
ahead of the PR opening.

backend/__tests__/integration/adminBackupCoverage.test.js

@@ -72,7 +72,7 @@ describe('GET /api/admin/system-health/backup-coverage', () => {
 
   async function restoreDefaultPaths() {
     await db('backup_paths').del();
-    const { DEFAULT_PATHS } = require('../../migrations/core/108_add_backup_paths');
+    const { DEFAULT_PATHS } = require('../../migrations/core/109_add_backup_paths');
     await db('backup_paths').insert(DEFAULT_PATHS.map((row) => ({
       ...row,
       created_at: new Date(),

backend/__tests__/integration/backupService.configurableWalker.test.js

@@ -1,7 +1,7 @@
 /**
  * Pins the Stage-B refactor that lifted the file-backup walker's
  * subdirectory list out of hard-coded JS into the `backup_paths`
- * table seeded by migration 108.
+ * table seeded by migration 109.
  *
  * Scenarios:
  *   1. Walker reads canonical seed → all 7 default subdirs walked
@@ -53,7 +53,7 @@ describe('backupService — configurable walker (backup_paths)', () => {
     await db('backup_paths').del();
     const {
       DEFAULT_PATHS,
-    } = require('../../migrations/core/108_add_backup_paths');
+    } = require('../../migrations/core/109_add_backup_paths');
     await db('backup_paths').insert(DEFAULT_PATHS.map((row) => ({
       ...row,
       created_at: new Date(),
@@ -61,7 +61,7 @@ describe('backupService — configurable walker (backup_paths)', () => {
     })));
   });
 
-  it('migration 108 seeds the canonical 7 paths', async () => {
+  it('migration 109 seeds the canonical 7 paths', async () => {
     const rows = await db('backup_paths').orderBy('display_order', 'asc').select();
     expect(rows.map((r) => r.path)).toEqual([
       'events/active',

backend/__tests__/integration/backupService.perPathStats.test.js

@@ -60,8 +60,8 @@ describe('backupService — per-Stage-B-path statistics', () => {
     ]).onConflict('setting_key').merge();
     fs.mkdirSync(path.join(storagePath, 'destination'), { recursive: true });
 
-    // Restore canonical backup_paths from migration 108
-    const { DEFAULT_PATHS } = require('../../migrations/core/108_add_backup_paths');
+    // Restore canonical backup_paths from migration 109
+    const { DEFAULT_PATHS } = require('../../migrations/core/109_add_backup_paths');
     await db('backup_paths').del();
     await db('backup_paths').insert(DEFAULT_PATHS.map((row) => ({
       ...row,
@@ -170,7 +170,7 @@ describe('backupService — per-Stage-B-path statistics', () => {
 // — once via each path. Per-path stats then attribute the file to the
 // longest-prefix-matching path BOTH times, producing inflated counts.
 //
-// The canonical seed in migration 108 contains no overlapping pairs,
+// The canonical seed in migration 109 contains no overlapping pairs,
 // so this isn't exercised in practice. But an admin who hand-adds a
 // broad row that overlaps an existing nested one will see double
 // counts in their next backup's statistics + the destination will