The latch was re-armed on every ready, so a backend that dies shortly after
each restart was respawned forever, each round firing the persistent
'stopped working' toast — #112344 asked for a backoff-bounded self-heal
and a visible no-backend state. The latch now grants at most 3 respawns
per 2-minute window; past that, claim() refuses, the supervisor logs and
surfaces one 'keeps crashing — relaunch Hermes Desktop' exit instead of
starting another child, and a new window re-opens the budget.
8e5b0e2a1b