fix(caddy): replace mktemp+trap pattern with read_secret helper

Merge pull request #43 from killer23d/copilot/fix-restore-backup-path

Fix setup.sh backup dir tree; harden rclone prompt input validation and PUID/PGID numeric check

Fix BACKUP_DIR key, add emergency restore rclone prompt, make .env load non-fatal for remote restores

Initial plan

fix(restore): resolve backup path from BACKUP_BASE_DIR, not PROJECT_ROOT

fix(uninstall): correct 5 bugs found by cross-audit against setup.sh

fix: automate chmod +x for all scripts after clone

fix(systemd): fix false-positive OnCalendar validator warning

fix(health): read DOMAIN_NAME+ADMIN_EMAIL from loaded env, not hardcoded /etc path (BUG-health-envread)

fix(startup): use correct container names in wait_for_services (BUG-startup-container-names)

fix(init): add DAC_OVERRIDE cap so chmod works after chown (BUG-init-dac-override)

fix(init): set logs/caddy ownership BEFORE find /logs sweep (BUG-caddy-log-order)

fix(init): stop chowning caddy data/config to PUID:PGID; caddy runs as root

fix(caddy): robust log-file writable guard with actionable host-side fix