bdf45abd7c
Port owned-before-borrowed resolution from #104624, crediting the root cause in #104622. Include the synchronous and asynchronous auxiliary fallback recovery sites: forward the failed request key so an unrelated borrowed login never owns that refresh. Local-wire probes preserve the borrowed file and exchange only the owned grant. Broader validation remains queued; do not treat this commit as ready. Co-authored-by: liuhao1024 <sunsky.lau@gmail.com> Co-authored-by: d-bow-dev <24577047+dwb1991@users.noreply.github.com>