Refresh idle leases before deciding terminal playback, and keep evicted
windows retryable while the manifest refresh is debounced.
Avoid the global access-lease write lock on healthy completions.
Revalidate failed attempts after acquiring lease-store and session locks.
Cover idle recovery in all startup modes and cleanup lock contention.