Add Kopia backup stack with Backblaze B2 offsite target.

Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.

plans/homelab-improvements/tasks/TB-013-code-server-mount.md

@@ -0,0 +1,57 @@
+# TB-013 — Narrow code-server mount
+
+**Status:** not started  
+**Your call:** _(unset — talk first)_
+
+---
+
+## Talk first
+
+> **Stop.** Don't read Reference until we've talked.
+> In chat, say **"let's do TB-013"** or **"narrow code-server mount"**.
+
+**In one sentence:** Stop code-server from mounting your entire home directory.
+
+**Why it came up:** code.ginnoir.com currently exposes /home/ginnoir — SSH keys, everything.
+
+### Questions
+
+1. What folders do you actually edit in code-server?
+2. homelabstack + a projects dir enough?
+
+### Your options
+
+| Option | Meaning |
+|--------|---------|
+| **Do it** | We're doing this — I'll implement or walk you through it |
+| **Later** | Keep on the list, not now |
+| **Drop** | Remove from plan — totally fine |
+| **Tweak** | Change scope; tell me how |
+
+### What we decided
+
+| | |
+|---|---|
+| **Decision** | |
+| **Notes** | |
+| **Date** | |
+
+---
+
+<details>
+<summary>Reference (only open if we're doing it)</summary>
+
+### Stack / files
+
+stacks/dev/docker-compose.yml
+
+### If we do it — rough steps
+
+1. Change mount to scoped path
+2. Symlink homelabstack if needed
+
+### Done when
+
+- [ ] .ssh and unrelated home dirs not visible in IDE
+
+</details>