Harden upload lifecycle and renderer recovery

Serialize upload starts across durable audit work, drain in-flight batch additions before cleanup, and fail closed when recovery persistence is incomplete. Wire bounded renderer reload recovery with a branded localized failure surface and use merge-safe fallback log persistence.

scripts/verify-public-release.mjs

@@ -66,6 +66,7 @@ const sourceFiles = [
   'lib/upload-diagnostics.js',
   'lib/upload-manager.js',
   'lib/upload-recovery.js',
+  'lib/upload-start-reservation.js',
   'lib/vidmoly-upload.js',
   'lib/voe-upload.js',
   'lib/webhook-notify.js',
@@ -158,6 +159,7 @@ const sourceFiles = [
   'tests/upload-diagnostics.test.js',
   'tests/upload-manager.test.js',
   'tests/upload-recovery.test.js',
+  'tests/upload-start-reservation.test.js',
   'tests/session-report.test.js',
   'tests/validate-credentials.test.js',
   'tests/webhook-notify.test.js'