Reliable personalised path allowances

Personalised path generation now uses the existing path allowance service from admission through atomic save. Queued and running work keeps its reservation alive without extending the fixed deadline, failures release capacity for an explicit retry, and successful saves consume exactly one allowance while retaining the stable generation identity.