Scheduled reports: Download, a report for a period as a ZIP

inbuxa:ReportExport/set creates {reportId, from?, to?}: the report built
for that period (its last full one by default, at most 90 days back, as
far as metrics are kept) as a ZIP of summary.txt and the section CSVs,
stored as an upload, mailing nobody. Reading needs sysScheduledReportGet,
as seeing the report does; a tenant administrator downloads only their
own; every download is in the audit log. A download doesn't move the
deliverability baseline the next mail compares with.

resources/privacy/catalog.toml

@@ -188,6 +188,16 @@ retention = "object-life"
 [object."inbuxa:ScheduledReport".properties]
 recipients = ["contact"]
 
+[object."inbuxa:ReportExport"]
+file = "inbuxa_report_export.rs"
+default = "none"
+whose = ["administrator", "holder", "correspondent"]
+where = ["blob-store"]
+scope = "tenant"
+retention = { setting = "x:Jmap.uploadTtl" }
+[object."inbuxa:ReportExport".properties]
+blobId = ["contact", "network", "metadata"]
+
 [object."inbuxa:ScheduledReportSettings"]
 file = "inbuxa_scheduled_report_settings.rs"
 default = "none"