Durable

This backend commits to a medium that outlives the process, and store is a new handle onto the one the restarted store wrote to. Everything durably written before the restart must be readable through it, and everything deleted must still be gone.