Restore file uploads and verify in the drill

Put the files back, and prove it in the drill.

• Pull, decrypt, and unpack into the target path or volume, guarding against clobbering live data (a live restore needs --yes). As with the DB live-restore, stop the app service first (docker compose stop <svc>, restore, then start) so it isn't writing mid-unpack. Never use docker compose down.
• bur restore APP restores both the DB and the files. --drill restores the DB into a throwaway container and the files into a throwaway directory, asserting row counts and file count and size. File sizes also appear in the size report.

Acceptance

• bur restore issues --latest --drill verifies both the DB rows and the file tree.
• a live restore writes files back to the path or volume behind a confirmation.
• file sizes appear in the size report.