feat(maintenance): guard DB + log growth (Option B + daily prune + rotation)

Root cause of the 2GB prod import.db: the sync_run_orders audit junction
recorded every order on every run; under the 1-minute scheduler ~98% of
21.7M rows were no-op ALREADY_IMPORTED re-observations. NSSM stdout/stderr
also grew unbounded (rotation never applied to the live service).

Changes:
- sqlite_service: skip ALREADY_IMPORTED rows in sync_run_orders (write-side
  guard, _SKIP_JUNCTION_STATUSES); add prune_sync_history(retention_days)
  with incremental_vacuum.
- maintenance_service (new): cleanup_old_logs + run_daily_maintenance.
- scheduler_service: start_maintenance_job (daily CronTrigger).
- main.py: RotatingFileHandler (sync_comenzi_current.log, 10MB x5) instead
  of a new timestamped file per start; schedule daily maintenance + one-shot
  catch-up at startup.
- scripts/db_maintenance.py (new): one-shot prune + VACUUM + log cleanup,
  plain sqlite3, invoked by deploy.ps1 while the service is stopped.
- deploy.ps1: stop -> run db_maintenance.py -> (re)apply NSSM AppRotate*
  idempotently -> start, so rotation reaches pre-existing services.

Retention defaults: 7 days history, 7 days logs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

deploy.ps1

@@ -431,26 +431,39 @@ if ($NssmExe) {
 
     $existingService = Get-Service -Name $ServiceName -ErrorAction SilentlyContinue
 
-    if ($existingService) {
-        Write-Info "Serviciu existent, restarteaza..."
-        & $NssmExe restart $ServiceName
-        Write-OK "Serviciu $ServiceName restartat"
-    } else {
+    if (-not $existingService) {
         Write-Info "Instalez serviciu $ServiceName cu NSSM..."
         & $NssmExe install $ServiceName (Join-Path $RepoPath "start.bat")
         & $NssmExe set $ServiceName AppDirectory $RepoPath
         & $NssmExe set $ServiceName DisplayName "GoMag Vending Import Manager"
         & $NssmExe set $ServiceName Description "Import comenzi web GoMag -> ROA Oracle"
         & $NssmExe set $ServiceName Start SERVICE_AUTO_START
-        & $NssmExe set $ServiceName AppStdout (Join-Path $RepoPath "logs\service_stdout.log")
-        & $NssmExe set $ServiceName AppStderr (Join-Path $RepoPath "logs\service_stderr.log")
-        & $NssmExe set $ServiceName AppRotateFiles 1
-        & $NssmExe set $ServiceName AppRotateOnline 1
-        & $NssmExe set $ServiceName AppRotateBytes 10485760
-        & $NssmExe start $ServiceName
-        Write-OK "Serviciu $ServiceName instalat si pornit"
+    } else {
+        Write-Info "Serviciu existent, il opresc pentru mentenanta..."
+        & $NssmExe stop $ServiceName 2>$null
+        Start-Sleep -Seconds 3
     }
 
+    # Mentenanta DB + log-uri cu serviciul oprit: prune istoric (7z) + VACUUM
+    # (reclaim disc) + cleanup log-uri (7z). Non-fatal daca esueaza.
+    Write-Info "Mentenanta DB/log-uri (prune + VACUUM + cleanup)..."
+    try {
+        & $VenvPy (Join-Path $RepoPath "scripts\db_maintenance.py") --history-days 7 --log-days 7
+    } catch {
+        Write-Warn "Mentenanta DB a esuat (continui): $_"
+    }
+
+    # (Re)aplica config log/rotatie de fiecare data — idempotent, astfel rotatia
+    # ajunge si pe serviciile instalate inainte ca aceste setari sa existe.
+    & $NssmExe set $ServiceName AppStdout (Join-Path $RepoPath "logs\service_stdout.log")
+    & $NssmExe set $ServiceName AppStderr (Join-Path $RepoPath "logs\service_stderr.log")
+    & $NssmExe set $ServiceName AppRotateFiles 1
+    & $NssmExe set $ServiceName AppRotateOnline 1
+    & $NssmExe set $ServiceName AppRotateBytes 10485760
+
+    & $NssmExe start $ServiceName
+    Write-OK "Serviciu $ServiceName pornit (mentenanta + rotatie aplicate)"
+
 } else {
     # Fallback: Task Scheduler
     Write-Warn "NSSM nu este instalat"