Restore from backup

Uploads a backup ZIP and replaces all Hub configuration state. This is a full replace applied as a transaction. Use /api/backup/preview first to see what will change.