Load limiting safeguards

scripts/push-seal.md

@@ -104,6 +104,10 @@ ExecStart=… consistency_check.py --remote --all
 2. Skips repos that are already clean (no issues, not behind, not ahead)
 3. For repos needing action: `git pull --ff-only` first, then `fix_repo()` (which ends with T04 push)
 
+It also holds `/tmp/custodian-consistency-remote-all.lock` for the duration of
+the sweep and defaults to a 300-second wall-clock budget. These guards keep a
+slow or stalled sweep from overlapping with the next 15-minute timer activation.
+
 Previously `--all --fix` was used, which skipped the pull step and the clean-repo skip logic.
 
 ---