Agent retry loops

Budget enforcement belongs in a row lock ahead of the model call

A dev.to postmortem burned $1,900 against a $600 cap after the alert arrived exactly on time, and the fix it lands on is a reservation that refuses the call before any network I/O rather than a better threshold.