Module retention 

Bounded reclamation of retained attempts and Cargo outputs. Source recovery and build eviction have separate authority: evicting a target never retires a run.

Modules

reconcile

Explicit, bounded reconciliation of historical blanket source retention.