PTY admission and resource isolation

Reserve global and per-owner PTY capacity atomically before the first asynchronous spawn boundary; release reservations on failure and only evict confirmed-exited owner sessions. Aggregate opencode-pty.slice limits are insufficient because sibling transient units can starve one another. Retain aggregate limits, but give every unit independent memory and task ceilings plus appropriate CPU, I/O, storage, and network limits.