fixed backup type detection and folder name collisions. removed Store/Website repository preferences. refactored token show.phtml to use secureRenderer for CSP compliance. added create_mini ACL resource.