oversell
Holds that cannot oversell. Postgres reservations with a TTL, a payment phase, idempotent two-path confirmation, a concurrent-safe sweeper and a drift check.
