sync: Dataforth sync fixes, TestDataDB stability, and client scripts

Dataforth DOS:
- TestDataDB: singleton DB connection fix (crash prevention), WAL mode,
  WinSW service config, backup script, uncaught exception handlers
- Sync-FromNAS.ps1: Get-NASFileList temp file approach to avoid SSH
  stdout deadlock, *> $null output suppression, 8.3 filename filter
  for PUSH phase, backslash-escaped SCP paths, rename-to-.synced
- import.js: INSERT OR REPLACE for re-tested devices
- Full import run: 1,028,275 -> 1,632,793 records, indexes added
- Deploy script for sync fixes to AD2

Client scripts (temp/):
- BG Builders: Lesley account check, MFA phone update
- Lonestar Electrical: Kyla/Russ Google Workspace setup, 2FA bypass
- AD2 diagnostics and NAS connectivity tests

PENDING: Investigate why newest test_date is Jan 19 despite daily tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

temp/bgb-lesley-mfa-phone2.ps1

@@ -0,0 +1,26 @@
+# Update MFA phone number for Lesley Roth @ BG Builders
+$ErrorActionPreference = "Stop"
+$lesleyUPN = "lesley@bgbuildersllc.com"
+$newPhone = "+1 4804954511"
+$tenantId = "ededa4fb-f6eb-4398-851d-5eb3e11fab27"
+
+Import-Module Microsoft.Graph.Authentication
+Connect-MgGraph -TenantId $tenantId -Scopes 'UserAuthenticationMethod.ReadWrite.All' -NoWelcome
+
+$mobileMethodId = "3179e48a-750b-4051-897c-87b9720928f7"
+
+Write-Output "Current: +1 4802299138"
+Write-Output "Changing to: $newPhone"
+
+$body = @{ phoneNumber = $newPhone; phoneType = "mobile" } | ConvertTo-Json
+Invoke-MgGraphRequest -Method PUT -Uri "https://graph.microsoft.com/v1.0/users/$lesleyUPN/authentication/phoneMethods/$mobileMethodId" -Body $body -ContentType "application/json"
+
+Write-Output "[OK] Phone updated"
+
+# Verify
+$methods = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/users/$lesleyUPN/authentication/phoneMethods"
+foreach ($m in $methods.value) {
+    Write-Output "Verified: $($m.phoneType) = $($m.phoneNumber)"
+}
+
+Disconnect-MgGraph