fix(backup): bound cron backup containers

scripts/backup/tests/test_backup_container_resource_contract.py

@@ -0,0 +1,35 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[3]
+COMMON = ROOT / "scripts" / "backup" / "common.sh"
+CLAWBOT = ROOT / "scripts" / "backup" / "backup-clawbot.sh"
+SENTRY = ROOT / "scripts" / "backup" / "backup-sentry.sh"
+
+
+def test_common_defines_bounded_container_defaults_for_cron() -> None:
+    source = COMMON.read_text(encoding="utf-8")
+
+    assert 'BACKUP_DOCKER_CPUS="${BACKUP_DOCKER_CPUS:-1.0}"' in source
+    assert 'BACKUP_DOCKER_MEMORY="${BACKUP_DOCKER_MEMORY:-1g}"' in source
+    assert 'BACKUP_DOCKER_MEMORY_SWAP="${BACKUP_DOCKER_MEMORY_SWAP:-1g}"' in source
+
+
+def test_sentry_and_clawbot_backup_containers_use_the_bounded_contract() -> None:
+    common = COMMON.read_text(encoding="utf-8")
+    for script in (CLAWBOT, SENTRY):
+        source = script.read_text(encoding="utf-8")
+
+        assert 'source "$(dirname "$0")/common.sh"' in source
+        for variable in (
+            "BACKUP_DOCKER_CPUS",
+            "BACKUP_DOCKER_MEMORY",
+            "BACKUP_DOCKER_MEMORY_SWAP",
+        ):
+            assert variable in common
+            assert variable in source
+
+    clawbot = CLAWBOT.read_text(encoding="utf-8")
+    assert "clawbot-v5_clawbot-redis-data:/data:ro" in clawbot