Enforce worker capacity under the same lock as assignment
A least-loaded query is only a candidate hint; it cannot enforce a per-worker capacity limit under concurrency. Lock the selected worker row, recount every unreleased holding inside the assignment transaction, reject when the cap is reached, and retry another eligible worker. Exi…