- A restore that replaces the database forgets the stored health report,
and a check that started before the swap is not kept (database
generation stamped at start).
- The Overview no longer walks every source for the missing-thumbnail
count; the page reads /images/thumbnails/status on its own.
- Image sources for the health check and the Overview resolve in the
executor; a failure to start the check answers the coded envelope.
- Any exception fails only its own check; missing files reads its rows in
the snapshot and stats the files after it ended.
- The read-only URI keeps Windows UNC paths (empty authority).
- An integrity count at SQLite's limit is flagged as capped.