fix: correct verify's ciphertext field map against the models

backup/verify.go

@@ -117,12 +117,25 @@ func probe(ctx context.Context, opt VerifyOptions, rep *VerifyReport) error {
 // ciphertextFields names, per collection, the fields that hold hex ciphertext.
 // A value is a candidate only if it is a hex string long enough to carry a GCM
 // nonce and tag, which is what keeps this from probing a plaintext field.
+//
+// This map MIRRORS BY HAND the bson tags in server/internal/models, which this
+// package cannot import: shared/ is a separate module and models is under
+// server/internal. It must change in the same commit as any rename of the
+// fields below — the same mirrored-constant hazard as web/lib/targets.ts and
+// services.MaxWorkloadLogLines. The sources are:
+//
+//	keys             — models/key.go: private_key_enc, passphrase_enc
+//	secrets          — models/secret.go: encrypted_value
+//	auth_providers   — models/auth_provider.go: client_secret_enc
+//	console_sessions — models/console_session.go: rdp_user_enc, rdp_pass_enc
+//
+// settings is deliberately absent: it holds no ciphertext at all. The ESO read
+// token is stored as a SHA-256 hash, which no key opens.
 var ciphertextFields = map[string][]string{
 	"keys":             {"private_key_enc", "passphrase_enc"},
-	"secrets":          {"values"},
+	"secrets":          {"encrypted_value"},
 	"auth_providers":   {"client_secret_enc"},
-	"console_sessions": {"rdp_password_enc", "vnc_password_enc"},
-	"settings":         {"secrets_token_hash_enc"},
+	"console_sessions": {"rdp_user_enc", "rdp_pass_enc"},
 }
 
 func findCiphertext(ctx context.Context, db *mongo.Database, coll string) (string, bool, error) {
@@ -150,8 +163,9 @@ func findCiphertext(ctx context.Context, db *mongo.Database, coll string) (strin
 	return "", false, cur.Err()
 }
 
-// looksLikeCiphertext accepts a hex string long enough to be a sealed value, and
-// descends one level into a map so secrets' values sub-document is reachable.
+// looksLikeCiphertext accepts a hex string long enough to be a sealed value. It
+// descends into a sub-document so a field that holds a map of sealed values is
+// still reachable.
 func looksLikeCiphertext(v any) (string, bool) {
 	switch t := v.(type) {
 	case string: