rpi: исключать помеченные OneDrive заражённые файлы

stacks/rpi-backup/bin/onedrive-backup

@@ -16,6 +16,7 @@ LOG="$ROOT/logs/sync-$TS.log"
 rclone sync onedrive: "$ROOT/current" \
   --backup-dir "$ROOT/archive/$TS" \
   --exclude "/Personal Vault/**" \
+  --metadata-exclude "malware-detected=true" --onedrive-av-override=false \
   --transfers 4 --checkers 8 \
   --retries 5 --low-level-retries 20 \
   --log-file "$LOG" --log-level INFO \

stacks/rpi-backup/bin/onedrive-verify

@@ -10,6 +10,7 @@ mountpoint -q /mnt/backup || { echo "/mnt/backup не смонтирован —
 rc=0
 
 rclone check onedrive: "$ROOT/current" --exclude "/Personal Vault/**" \
+  --metadata-exclude "malware-detected=true" --onedrive-av-override=false \
   --checkers 8 --combined "$ROOT/logs/verify-$TS.current.txt" \
   --log-file "$LOG" --log-level NOTICE || rc=1