chore(migrations): renumber 108_add_backup_paths to 109 to avoid upstream collision

upstream/beta independently shipped 108_seed_sl_email_template_translations.js
(Slovenian email template translations) using the migration number
this branch had already claimed for 108_add_backup_paths.js. Knex's
filename-based ordering would have caused both to attempt the slot
at merge time.

Renamed via `git mv` so file history is preserved. All five
references updated in lockstep:
  - backend/src/services/_backupPathsBoot.js (require + comments)
  - backend/src/services/backupService.js (LEGACY_BACKUP_PATHS comment)
  - 3 integration test files (require + "migration 108" prose)
  - migration's own header comment, with a paragraph explaining the
    rename so reviewers don't wonder why the number jumped

**No data-migration impact for installs that already ran the
108-named version** (Ralf's beta, primarily): the migration's body
is idempotent — createTable is guarded by `hasTable`, and the seed
uses `onConflict('path').ignore()`. So when 109 runs against an
install whose backup_paths table is already populated, both the
schema step and the seed step no-op cleanly. The orphaned
`108_add_backup_paths.js` row in the `migrations` tracking table
sits harmlessly alongside the new `109_add_backup_paths.js` row.

No data lost, no double-insert, no schema drift. Mechanical rename
ahead of the PR opening.

backend/__tests__/integration/backupService.perPathStats.test.js

@@ -60,8 +60,8 @@ describe('backupService — per-Stage-B-path statistics', () => {
     ]).onConflict('setting_key').merge();
     fs.mkdirSync(path.join(storagePath, 'destination'), { recursive: true });
 
-    // Restore canonical backup_paths from migration 108
-    const { DEFAULT_PATHS } = require('../../migrations/core/108_add_backup_paths');
+    // Restore canonical backup_paths from migration 109
+    const { DEFAULT_PATHS } = require('../../migrations/core/109_add_backup_paths');
     await db('backup_paths').del();
     await db('backup_paths').insert(DEFAULT_PATHS.map((row) => ({
       ...row,
@@ -170,7 +170,7 @@ describe('backupService — per-Stage-B-path statistics', () => {
 // — once via each path. Per-path stats then attribute the file to the
 // longest-prefix-matching path BOTH times, producing inflated counts.
 //
-// The canonical seed in migration 108 contains no overlapping pairs,
+// The canonical seed in migration 109 contains no overlapping pairs,
 // so this isn't exercised in practice. But an admin who hand-adds a
 // broad row that overlaps an existing nested one will see double
 // counts in their next backup's statistics + the destination will