v1.45.2: hardening from the v1.45.1 review — R4-1, R4-2

R4-1: collecting superseded plan files runs after the configuration is already
durable, but an error listing the directory propagated out of config/set. The
client saw a failure for a revision the server had committed, and its retry
came back as a conflict. collect_plans now reports 0 instead of raising, and
config/set logs and proceeds — the event fires, the revision is returned.

R4-2: the pending set was cleared when a batch went out, not when it came back,
so every render during an in-flight content/sign queued another request: six
calls where one was needed, and unbounded on a socket that is slow rather than
busy. Queued and in-flight are separate states now; a failure backs off (2 s
doubling to 60 s) instead of retrying on the next frame; an in-flight entry
expires after 15 s so a promise that never settles cannot wedge retries; a late
answer after dispose() no longer renders.

Tests: test/signing.test.mjs — eight cases with hand-settled promises, verified
against a v1.45.1 checkout where four of them fail (2 sign calls instead of 1,
no backoff, a late answer rendering after teardown). Backend: a broken
collector still yields a successful save whose revision the next CAS accepts.
Pure collector: a disappearing directory returns 0.
Docs: CHANGELOG.md + CHANGELOG.ru.md + ARCHITECTURE.md + TESTING.md + STATUS.md.

demo/smoke_space_card_bg.mjs

@@ -51,19 +51,26 @@ const res = await page.evaluate(async () => {
   await new Promise((r) => setTimeout(r, 120));
   out.hrefAfterFailedSign = await href();
 
-  // 2) повтор после ошибки: pending освобождён, вторая попытка проходит
+  // 2) сразу повтора нет: после ошибки подпись уходит в backoff (ревью R4-2),
+  //    иначе нестабильный сокет получал бы по запросу на каждый рендер
+  for (let i = 0; i < 5; i++) { card.requestUpdate(); await card.updateComplete; }
+  await new Promise((r) => setTimeout(r, 150));
+  out.noRetryStorm = signCalls === 1;
+
+  // 3) после выдержки повтор проходит
+  await new Promise((r) => setTimeout(r, 2100));
   card.requestUpdate(); await card.updateComplete;
   await new Promise((r) => setTimeout(r, 150));
   out.hrefAfterRetry = await href();
-  out.retried = signCalls >= 2;
+  out.retried = signCalls === 2;
 
-  // 3) повторный рендер не теряет подпись и не просит её заново
+  // 4) повторный рендер не теряет подпись и не просит её заново
   const before = signCalls;
   card.requestUpdate(); await card.updateComplete;
   out.hrefStable = await href();
   out.noExtraSignOnRerender = signCalls === before;
 
-  // 4) протухшая подпись не отдаётся, стареющая — отдаётся, пока едет замена
+  // 5) протухшая подпись не отдаётся, стареющая — отдаётся, пока едет замена
   const ent = card._signer.entries;
   ent[raw] = { url: raw + '?authSig=OLD', at: Date.now() - 25 * 3600 * 1000 };
   card.requestUpdate(); await card.updateComplete;
@@ -80,6 +87,7 @@ const res = await page.evaluate(async () => {
 // зафиксировано прогоном на v1.45.1 и сверено с кодом
 checkAll(res, {
   hrefAfterFailedSign: null,
+  noRetryStorm: true,
   hrefAfterRetry: '/api/houseplan/content/plans/_/f1.tok.svg?authSig=SIG2',
   retried: true,
   hrefStable: '/api/houseplan/content/plans/_/f1.tok.svg?authSig=SIG2',