Clean up used-up tokens from database

Design document for replication and recovery system

Remove the old backup API

tests are failing

It is more obvious that this is *easy* than that it makes complete sense...

not sure how the openapi renderer is going to feel about this, but maybe
better than it felt about what was there before?