chore: tune backup function and related docs

backend/bot/services/backup_archive.py

@@ -1,53 +1,15 @@
 import hashlib
-import hmac
 import json
 import zipfile
 from pathlib import Path
 from typing import Any
 
-from config.settings import Settings
-
 BACKUP_APP_ID = "remnawave-minishop"
 BACKUP_FILENAME_PREFIX = "remnawave-minishop-backup-"
 BACKUP_FORMAT_VERSION = 1
 BACKUP_MANIFEST_NAME = "manifest.json"
 
 
-def backup_signature_secret(settings: Settings) -> str:
-    configured = str(getattr(settings, "BACKUP_ARCHIVE_SIGNATURE_SECRET", "") or "").strip()
-    return configured or settings.BOT_TOKEN
-
-
-def canonical_manifest_payload(manifest: dict[str, Any]) -> bytes:
-    payload = json.loads(json.dumps(manifest, ensure_ascii=False))
-    archive = payload.get("archive")
-    if isinstance(archive, dict):
-        archive.pop("signature", None)
-    return json.dumps(
-        payload,
-        ensure_ascii=False,
-        sort_keys=True,
-        separators=(",", ":"),
-    ).encode("utf-8")
-
-
-def sign_manifest(manifest: dict[str, Any], settings: Settings) -> str:
-    return hmac.new(
-        backup_signature_secret(settings).encode("utf-8"),
-        canonical_manifest_payload(manifest),
-        hashlib.sha256,
-    ).hexdigest()
-
-
-def verify_manifest_signature(manifest: dict[str, Any], settings: Settings) -> bool:
-    archive = manifest.get("archive") if isinstance(manifest.get("archive"), dict) else {}
-    signature = str(archive.get("signature") or "")
-    if not signature:
-        return False
-    expected = sign_manifest(manifest, settings)
-    return hmac.compare_digest(signature, expected)
-
-
 def file_sha256(path: Path) -> str:
     digest = hashlib.sha256()
     with path.open("rb") as handle:
@@ -79,14 +41,12 @@ def attach_archive_integrity(
     manifest: dict[str, Any],
     *,
     file_records: list[dict[str, Any]],
-    settings: Settings,
 ) -> None:
     manifest["app"] = BACKUP_APP_ID
     manifest["format_version"] = BACKUP_FORMAT_VERSION
     manifest["archive"] = {
         "files": file_records,
     }
-    manifest["archive"]["signature"] = sign_manifest(manifest, settings)
 
 
 def write_manifest(source_dir: Path, manifest: dict[str, Any]) -> None: