fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

scripts/nfs-mirror.timer

@@ -0,0 +1,16 @@
+[Unit]
+Description=Daily local NFS mirror to /mnt/backup
+
+[Timer]
+# Daily 02:00 — runs 3h before daily-backup (05:00) so the .changed-files
+# manifest is populated and offsite-sync (06:00) ships both legs' deltas.
+# Switched from weekly Mon 04:00 → daily 2026-05-26: steady-state delta is
+# 10-20 min of mostly-metadata rsync, so the IO cost is negligible and it
+# cuts non-CronJob app-data RPO from 7d to ~24h (matters for nextcloud
+# shared files, audiobookshelf library, mailserver Maildir, etc.).
+OnCalendar=*-*-* 02:00:00
+Persistent=true
+RandomizedDelaySec=15min
+
+[Install]
+WantedBy=timers.target