Close owner sockets when their install grants expire
Closed
TE
6h ago+117+117+012345678901234567890123456789-10-10-01234567890123456789
Owner sockets could outlive their install grant, and the user wire accepted invalid grants. Connections now stop at the earlier token or grant deadline; registration and refresh also check the current grant.
Hosted backend checks pass, including ten new cases. The regression reproduces eight failures before the fix; live service verification is pending. Builds on #22382.
Changelog
Fixed Cloud connections remaining open after their install grants expire.