Time tracking for backups

- new finishtime field for a backup
- in-place database upgrade to add the new column,
  lightly tested by tests/dbupgrade
- report shows median/maximum time among extant backups
- only open DB read-write if actually needed