Constant PARKED_TTL 

const PARKED_TTL: Duration;

Maximum time a callback can sit parked before we cancel it automatically. Bounds the leak if the renderer never replies (background tab + suspended JS, hung modal). 5 minutes is well above any realistic credential-entry time and well below “user noticed and wondered what happened.”