fix: retry lock reads during Windows owner handoff

[smiggleworth]

Windows lock handoff can deny opening an owner record while its previous owner removes it, as well as denying directory scans. Extend the existing bounded retry to read-only lock observations (lstat, scandir, open, read) and include the initial lock check in that acquisition loop. Persistent denial retains its native cause and exact owner bytes. Deletion failures still propagate, and no transaction enters after those failures.

Validation: twelve added file/directory cases fail against immutable pre-fix source; 420 unit cases and the main release checks pass locally, including transient observation recovery, permanent-denial bounds, deletion-denial controls and 200 actual contended generator publications. The two prior exact merged Windows failures identify native scan and owner-open errors; both remain archived. Normal packed checks cover two names, nine removed imports, 15 private paths and actual TypeScript 6.0.3/7.0.2. All five packed templates, peer-floor, formatting, production audit (zero findings) and all 22 unchanged performance gates pass.

Refs #159. No dependency, version, public surface, lock token, publication record, workflow or budget changes. HTTPS resource cleanup, final candidate graph/site and maintainer review remain pending.