added db guard changes to prevent deletion

docs/production-db-recovery-runbook.md

@@ -1,6 +1,6 @@
 # Production DB Recovery and Safety Runbook
 
-Last updated: March 2, 2026
+Last updated: March 10, 2026
 
 ## Purpose
 
@@ -191,6 +191,8 @@ psql "postgres://<admin-user>:<admin-pass>@127.0.0.1:5432/skymoney" \
 4. Deploy workflow runs `scripts/guard-prod-volume.sh` and blocks deploy when prod volume is missing/empty.
 5. Deploy workflow runs pre-migration `scripts/backup.sh`.
 6. Deploy workflow uses `prisma migrate deploy` only.
+7. Security DB workflow runs `scripts/validate-test-db-target.sh` and refuses protected DB names (`skymoney`, `postgres`, `template*`).
+8. DB-backed test runtime (`api/tests/setup.ts`) refuses protected DB targets before any `deleteMany` cleanup runs.
 
 ### Intentional rebuild override