Bound concurrency
Control worker fan-out for the same application and operation class.
Back off on 429
Use bounded exponential backoff and stop after the operation deadline.
Preserve idempotency
Retried writes keep the same idempotency key for the same logical action.
