pub fn load_ref_state(dir: &Path) -> Result<Vec<RefState>, BridgeError>
Load per-ref EXPORT state (push leases). Missing file = empty.