one note on the datastore layer backups -

pg_dump

and

pg_restore

will fall afoul of how SpiceDB does MVCC. your backups need to be full physical backups.