- Fixed kernel teardown so session cleanup and signal handling share one bounded graceful shutdown path.