The cold-boot queue policy was computed inline at both start paths, and the default (drop) was silent — a command sent while the gateway was offline vanished with no log line (the second half of #71811). One helper now owns the decision and logs it on every cold boot, so an operator can tell which policy applied. Behaviour is unchanged.