feat: harden production data and backups

apps/api/alembic/versions/0010_screenshot_upload_token.py

@@ -0,0 +1,16 @@
+"""Protect pending screenshot uploads with a one-time token."""
+from alembic import op
+import sqlalchemy as sa
+
+revision = "0010"
+down_revision = "0009"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("catch_report", sa.Column("screenshot_upload_token_hash", sa.String(64)))
+
+
+def downgrade() -> None:
+    op.drop_column("catch_report", "screenshot_upload_token_hash")