config
POST /config/export
Pack the current installation into an encrypted .ucbundle written to targetPath, sealed with the installation's own key material (no export password; opening it later requires the space passphrase). The facade enforces the preconditions (initialized + unlocked) before any material is read. D14: session-JWT gated; the handler MUST NOT log the request body (no path on any span here).
post/config/export
Request body
Response
Configuration bundle written