Bounds long-term runtime memory growth. Every 5 minutes, if total runtime
RSS exceeds 2 GB, sessions idle longer than 30 minutes get evicted from
the SDK runtime. Evicted sessions transition to 'disconnected' state and
are transparently lazy-resumed on next user interaction.

Adaptive: when memory is fine, no eviction happens.
Safe: never drops mid-turn or pending-permission sessions.