Reserve an exclusively owned backup directory while replacing an installed app. Preserve neighboring .old files and directories, and retain the old copy with its recovery path if rollback fails.
Includes regression coverage for backup collisions and failed rollback.
PR #332.
