trails 1.8.3

A restore the agent refuses starts the trail fresh once, not twice. 1.8.1's late-refusal path and restore's own fallback could both start it, leaving two fresh agents on one trail (consent and consent-2). A restore now checks, inside the launch lock, whether a window already carries the trail's ID.

A trail's window gets its options in the same tmux command that makes it. On a slow start, the agent's first hook could run before them and start a pass that rewrote records, which could bring back a forgotten record or make a restored trail's own name read as taken.