ops: add nightly Docker volume backup to SAMURAI

- scripts/backup-volumes.sh: tar each named volume via alpine, rsync to
  SAMURAI (Tailscale 100.74.x.x) at 02:00; 7-day retention; preflight
  checks Tailscale + SSH before starting
- scripts/setup-samurai-ssh.sh: one-time SSH key install to SAMURAI
- scripts/monk-backup.{service,timer}: systemd units for nightly schedule
- docs/backup-setup.md: full setup instructions incl. Windows OpenSSH
  config and admin authorized_keys fix

Phase 2 (MinIO S3 on SAMURAI) tracked as TODO in backup-volumes.sh.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/monk-backup.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=KiteStacks Docker volume backup to SAMURAI
+After=network-online.target tailscaled.service docker.service
+Requires=docker.service
+
+[Service]
+Type=oneshot
+User=kenpatmonk
+ExecStart=/home/kenpatmonk/kitestacks-homelab/scripts/backup-volumes.sh
+StandardOutput=journal
+StandardError=journal
+# Give 1 hour max (large volumes)
+TimeoutStartSec=3600