chore(backup): disable scheduled backups

api/backup.js

@@ -5,6 +5,7 @@ const DROPBOX_APP_KEY = process.env.DROPBOX_APP_KEY;
 const DROPBOX_APP_SECRET = process.env.DROPBOX_APP_SECRET;
 const DROPBOX_REFRESH_TOKEN = process.env.DROPBOX_REFRESH_TOKEN;
 const BACKUP_SECRET = process.env.BACKUP_SECRET;
+const BACKUP_CRON_ENABLED = process.env.BACKUP_CRON_ENABLED === 'true';
 
 const DROPBOX_BACKUP_FOLDER = '/CrazeBackups';
 const MAX_BACKUP_AGE_DAYS = 7;
@@ -87,7 +88,15 @@ async function deleteOldBackups(token) {
 }
 
 export default async function handler(req, res) {
-  // Allow cron (no origin) or requests with valid secret
+  // Backup cron disabled by default to prevent noisy scheduled failures.
+  if (!BACKUP_CRON_ENABLED) {
+    return res.status(200).json({
+      success: true,
+      skipped: true,
+      reason: 'backup cron disabled',
+    });
+  }
+
   const authHeader = req.headers['authorization'];
   const isCron = !req.headers.origin;
   const hasSecret = BACKUP_SECRET && authHeader === `Bearer ${BACKUP_SECRET}`;