Keep noncritical recovery out of worker readiness
A background worker should not make a noncritical recovery sweep part of readiness when normal work can remain safe without it. Separate the sweep from the hot path, then add explicit fail-closed guards: prevent replay of already-claimed work, block later work that conflicts with…