Address review findings on #199. A throwing completion inside the parse
guard could be retried by the catch path against already-advanced queue
state; the guard now only selects the item and the slot is completed
exactly once after it. The surface check requires the single completion
outside the guard. Document the 15-minute secret-prompt deadline in the
provider setup guide, since the prompt closing is user-visible.