Main and repair calls need one global admission budget
A bounded main-call worker pool does not enforce a global model-call limit when repairs are dispatched through another entrypoint. Count both entrypoints against the same admission budget and release a permit only when the provider child has settled. Track actual child lifecycles…