Require revocable authorization for automatic lobby removal

src/lib/server/provisioning/safety-override.ts

@@ -19,6 +19,7 @@ export function safetyOverrideAvailability(id: string): { applicable: boolean; u
         AND d.state IN ('queued','waiting') AND d.submitted_at IS NULL AND n.operation_id IS NULL
         AND NOT EXISTS (SELECT 1 FROM ec_host_migrations m WHERE m.deployment_id=d.id)
         AND NOT EXISTS (SELECT 1 FROM native_creation_cancellations c WHERE c.cleanup_id=d.id)
+        AND NOT EXISTS (SELECT 1 FROM autoscaling_decisions a WHERE a.operation_id=d.id)
         AND NOT EXISTS (SELECT 1 FROM provisioning_safety_overrides o WHERE o.deployment_id=d.id)`)
         .get(id) as { host_id: string } | undefined;
     if (!target) return { applicable: false, unavailableReason: null };