renderer: the app-preview runtime lifecycle is bounded and balanced — timeouts, abort on unmount, an attachment lease per card, retry that restarts, a failure the card can show - #157