sync(restic): pull live esh-docker-vm + irv-ml1 profiles into the repo

Both hosts had live improvements the repo never recorded:
- esh-docker-vm excludes ESPHome's 539 MB of PlatformIO cache (2026-09-14).
- irv-ml1 runs /etc/restic/arbo-checkpoint.sh before the backup, a non-fatal
  SQLite online-backup of arbo's gallery DB. That script is added here too.
The live copies were correct and are the source for the next change. (Also fixes
the fv-ml1 augaman removal time to ~0130 PT.)

configs/restic/esh-docker-vm/profiles.yaml

@@ -56,6 +56,14 @@ default:
       # sidecars retired fleet-wide; no more offen-scratch volumes exist.
       # Ephemeral / regenerable
       - /opt/docker/compose/*/logs
+      # ESPHome PlatformIO toolchain + build artifacts (added 2026-09-14 with
+      # the config relocation). The CONFIG is 5 files / 3 KB and is the whole
+      # point of pulling this dir into coverage; these two subtrees are 539 MB
+      # of regenerable cache -- a 45x inflation of the /opt/docker source,
+      # which this profile's own comment budgets at ~12 MB. PlatformIO
+      # re-downloads them on demand.
+      - /opt/docker/conf/esphome/.esphome/platformio
+      - /opt/docker/conf/esphome/.esphome/build
       - "**/*.log"
       - "**/*.log.*"
       - "**/*.pid"

configs/restic/irv-ml1/arbo-checkpoint.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+# Consistent SQLite snapshot of the arbo gallery DB, run before the restic backup.
+# Uses SQLite's online-backup API (safe under concurrent writes) to write
+# gallery.sqlite.bak INSIDE the arbo_db volume — which is already a restic
+# source (/var/lib/docker/volumes), so the consistent copy rides the daily run.
+# NON-FATAL by design: a failure here (e.g. container down) must NOT abort the
+# host's sole backup, hence the trailing `|| true`.
+docker exec arbo python -c 'import sqlite3; s=sqlite3.connect("/data/gallery.sqlite"); d=sqlite3.connect("/data/gallery.sqlite.bak"); s.backup(d); d.close(); s.close()' || true

configs/restic/irv-ml1/profiles.yaml

@@ -20,7 +20,8 @@
 #     source. Only /opt/docker is backed up (compose files + configs,
 #     once Docker is installed following the fleet convention).
 #
-# No DB dumps needed — this host's workloads don't store relational data.
+# DB: arbo (catalog engine) keeps a SQLite gallery DB in the arbo_db volume;
+# run-before checkpoints it (gallery.sqlite.bak) so the daily volume backup is consistent.
 
 version: "1"
 
@@ -40,6 +41,8 @@ default:
 
   backup:
     verbose: 1
+    run-before:
+      - /etc/restic/arbo-checkpoint.sh   # consistent SQLite snapshot of the arbo gallery DB
     run-after:
       - date +%s > /var/lib/restic/last-success
     source: