wiki(lint): close all 10 lint issues + delete windows-host backup task

- deleted .tasks/windows-host-fallback-backup-daily.md (MSSQL removed on decommission 2026-06-08)
- recovery-architecture-snapshot.md: marked ИСТОРИЧЕСКАЯ ЗАПИСЬ; removed 3 broken [[wiki-links]] (cms-server-port-leak-fix, cms-admin-assets-root-folder-seed, webconfig-password-xml-escape)
- snolla-recovery-vm.md: marked УДАЛЕНА 2026-06-08
- ruvds-iis-host.md: struck 2 resolved risks (imgproxy SPOF, LE renewal); cross-ref winacme
- future-resilient-architecture-goals.md: dead task link → plain text
- mssql-on-vds.md: frontmatter fix; Backup TODO section replaced with implemented block (Express COPY_ONLY, sqlcmd, bind-mount pattern)
- vds-kzntsv.md: added MSSQL row to software stack table
- log.md: update entries for lint + mssql backup implementation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.wiki/entities/ruvds-iis-host.md

@@ -3,7 +3,7 @@ title: RUVDS IIS Host (Windows Server 2025 Core) — 80.64.31.36
 type: entity
 tags: [hardware, vds, ruvds, windows, iis, cms, snolla, kupimknigi]
 sources: [../sources/iis-migration-to-ruvds-2026-05-23.md, ../sources/ruvds-backup-daily-kreknin-2026-05-24.md]
-updated: 2026-05-24
+updated: 2026-06-11
 ---
 
 # RUVDS IIS Host
@@ -62,9 +62,9 @@ Daily 04:30 MSK → [[kreknin-synology]] via rclone+SFTP. Снимаются: `C
 
 ## Известные риски / SPOF
 
-- **Image-pipeline SPOF:** RUVDS IIS вызывает `imgproxy.kzntsv.site` который **всё ещё** на [[windows-recovery-host]] — если домашняя машина гаснет, картинки rendering падает (HTML отдаётся OK с RUVDS). Verified post-migration `Test-NetConnection imgproxy.kzntsv.site -Port 443` = OK. Не closing полный SPOF — defer (Option B local nginx-relay / Option D decompile DLL, см. [[../concepts/iis-cutover-to-vds-services]]).
+- ~~**Image-pipeline SPOF:** RUVDS IIS вызывает `imgproxy.kzntsv.site` который всё ещё на [[windows-recovery-host]]~~ **СНЯТ 2026-06-08** — imgproxy переехал на [[../entities/books-vds]], windows-recovery-host декоммишнен. SPOF закрыт.
 - **2 GB RAM tight:** w3wp ~330 MB cold start. Monitor under prod load — возможно потребуется `RecyclingPeriodicRestartMemory 200MB` per pool.
-- **LE renewal pipeline отсутствует:** certs истекают 2026-07-22 (~60 дней window). Pending — `win-acme` standalone с HTTP-01 после full DNS swap (см. [[../sources/iis-migration-to-ruvds-2026-05-23]] Open questions).
+- ~~**LE renewal pipeline отсутствует:** certs истекают 2026-07-22~~ **ЗАКРЫТ 2026-06-05** — win-acme v2.2.9 + HTTP-01 развёрнут, новый cert (25-SAN) до 2026-09-03. SYSTEM ScheduledTask renewal раз в 60 дней. Подробности: [[../concepts/winacme-iis-owin-catchall-http01]].
 - **Home-network HTTP middlebox** (DPI/transparent proxy в OpenWRT/ISP) — mangles Host header для direct external HTTP smoke testing. Real end-users из других сетей не affected. См. [[../concepts/windows-server-2025-core-bootstrap]] Update 2026-05-24.
 
 ## Vendor onboarding
@@ -80,4 +80,5 @@ Daily 04:30 MSK → [[kreknin-synology]] via rclone+SFTP. Снимаются: `C
 - Backup chronology: [[../sources/ruvds-backup-daily-kreknin-2026-05-24]]
 - Bootstrap recipe: [[../concepts/windows-server-2025-core-bootstrap]]
 - Cert import recipe: [[../concepts/traefik-acme-json-to-iis-cert-import]]
+- LE auto-renewal recipe: [[../concepts/winacme-iis-owin-catchall-http01]]
 - Driver / SPOF rationale: [[../concepts/future-resilient-architecture-goals]]