Harden backup and restore operations

internal/scheduler/cron_test.go

@@ -43,3 +43,13 @@ func TestPreviousWithinCatchUpWindow(t *testing.T) {
 		t.Fatalf("unexpected catch-up match %v", got)
 	}
 }
+
+func TestCronUsesOrForRestrictedMonthDayAndWeekday(t *testing.T) {
+	expr, err := Parse("0 2 1 * 1")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !expr.Matches(time.Date(2026, 6, 8, 2, 0, 0, 0, time.UTC)) {
+		t.Fatal("restricted day-of-month and weekday were treated as AND")
+	}
+}