Docs: Admin file-locations routes in POLICY.md, open question 53 (archive copy never blocks filing), ARCHIVE_ROOT in the env examples

Co-Authored-By: Claude Opus 5.5 <[email protected]>

docs/POLICY.md

@@ -891,6 +891,10 @@ Every endpoint under `/api/admin` needs an Admin (PS-Admins) in a password sessi
 | `POST /users/import` | The profile CSV, as a preview (`apply: false`) or applied | `admin.profile_updated` per changed person, `admin.profile_import` |
 | `GET /checklists`, `PUT /checklists` | The default weld and plain lists, used by a department without its own list (see "Checklists"). The Admin screen no longer calls these; its Checklists tab edits department lists. | `admin.checklists_updated` |
 | `GET /security/settings`, `PUT /security/settings` | The session, lock and sign-in limit settings | `admin.security_settings_updated` |
+| `GET /file-locations` | The archive root, the saved archive folder, the last check and the copy counts | none |
+| `POST /file-locations/check` | Check a candidate archive folder: write, read back and remove a probe file. Saves nothing | `archive.checked` |
+| `PUT /file-locations` | Save the archive folder after the same check. 409 `archive_off` while `ARCHIVE_ROOT` is unset | `admin.file_locations_updated` |
+| `POST /file-locations/retry` | Ask the worker for an `archive-copy` run now and make every failed copy due | `admin.archive_retry` |
 | `GET /security/alerts?hours=` | Security alerts for 1 to 168 hours | none |
 | `GET /security/integrity` | The newest finished integrity run and its findings | none |
 | `GET /access-log` | Sign-in attempts and identity audit rows for everyone | none |