v3.4.140

Fix fully-refunded recipient bypassing quota via stuck revocation_error row in resource backfill.

get_active_recipients_for_product()'s has_active flag treated any grant_status != 'revoked' as an active grant, which also matched revocation_error rows (Drive delete failed, cron still retrying teardown). backfill_new_resources() used that flag to skip the quota check, letting a fully-refunded recipient whose old grant is stuck revoking receive brand-new Drive resources when a product's assets change. Same root cause as the already_has_slot fix in v3.4.139, applied to the backfill path.