Limit backup retry recovery to credential errors. Restore header selection and rethrow other failures, including cancellation, in CLI and GUI. Add regression coverage for fallback and credential recovery.
