WEB Carrier behavior aligned w/ reference

Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>

src/web/manager/lifecycle.rs

@@ -124,22 +124,10 @@ impl WebProcessRuntime {
 
     /// Expires credentials and closes idle sessions without holding locks across callbacks.
     pub(super) fn cleanup(&self) {
-        let generation_id = self.active_runtime.load().id;
         let now = Instant::now();
         let sessions = {
             let mut state = self.state.lock();
             remove_expired_locked(&mut state, now);
-            let stale_bootstraps = state
-                .bootstraps
-                .iter()
-                .filter_map(|(hash, bootstrap)| {
-                    (bootstrap.generation_id != generation_id && !bootstrap.used)
-                        .then_some(*hash)
-                })
-                .collect::<Vec<_>>();
-            for hash in stale_bootstraps {
-                remove_bootstrap_locked(&mut state, hash);
-            }
             state.sessions.values().cloned().collect::<Vec<_>>()
         };
         for session in sessions.into_iter().filter(|session| session.is_idle(now)) {

src/web/manager/state.rs

@@ -14,13 +14,11 @@ use crate::web::session::WebSession;
 
 /// One issued bootstrap and optional idempotent session-creation replay state.
 pub(super) struct Bootstrap {
-    /// Generation that issued the bootstrap.
-    pub(super) generation_id: u64,
     /// Credential and replay-state expiry deadline.
     pub(super) expires_at: Instant,
     /// Stable ordering point used for bounded eviction.
     pub(super) issued_at: Instant,
-    /// Forwarded client address that owns this credential.
+    /// Issuing address charged for the unused-bootstrap quota.
     pub(super) issuance_ip: IpAddr,
     /// Immutable profile selected during capability validation.
     pub(super) profile: Arc<WebRuntimeProfile>,