AUDIT: TrackedSemaphore double-counting risk

[asx8678]

File: concurrency_limits.py:65-90. Shadow _available counter can diverge from Semaphore._value if release() called without matching acquire(). No assertion to detect drift.