CodeRabbit on the current HEAD: record the bound port as soon as the
socket exists, make the lock a dependency of persistence as well as
HTTP, and serialize stale-lock takeover so two reclaimers cannot both
delete and recreate the same claim.

Co-authored-by: Cursor <cursoragent@cursor.com>