Fix flagged items: CRTC email submission, BITS todo, selector docs, stale plans

- CRTC letter now auto-emailed to secretary.general@crtc.gc.ca after eSign
- BITS admin todo updated to reference electronic + physical submission
- COLIN selectors.py: documented verification status per step
- BC config: added CRTC Secretary General email address
- plan.md: marked completed items (eSign, portal auth, CRTC email)
- go-live-todo.md: marked Compliance Calendar DocType as imported

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

infra/ansible/roles/backup/defaults/main.yml

@@ -0,0 +1,39 @@
+---
+# ── Backup Role Configuration ────────────────────────────────────────────────
+backup_dir: /opt/backups
+backup_user: deploy
+
+# Retention (days)
+pg_backup_retention: 30
+mariadb_backup_retention: 30
+umami_backup_retention: 14
+minio_backup_retention: 30
+forgejo_backup_retention: 30
+worker_backup_retention: 7
+
+# On-site backup server
+backup_remote_host: 207.174.124.50
+backup_remote_port: 22022
+backup_remote_user: deploy
+backup_remote_dir: /opt/backups
+
+# Container names
+pg_container: performancewest-api-postgres-1
+umami_pg_container: performancewest-umami-postgres-1
+mariadb_container: performancewest-erpnext-mariadb-1
+forgejo_container: performancewest-forgejo
+minio_container: performancewest-minio-1
+
+# Database credentials
+pg_user: pw
+pg_database: performancewest
+umami_pg_user: umami
+umami_pg_database: umami
+mariadb_root_password: "{{ erpnext_db_password }}"
+
+# MinIO
+minio_alias: local
+minio_endpoint: "http://127.0.0.1:9000"
+minio_access_key: "{{ vault_minio_access_key }}"
+minio_secret_key: "{{ vault_minio_secret_key }}"
+minio_bucket: performancewest

infra/ansible/roles/backup/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Reload systemd
+  ansible.builtin.systemd:
+    daemon_reload: true