Accept authenticated terminal deactivation notices over the Aux pipe when the
Main connection fails during teardown. Fence fallback notices by client and
focus token to prevent stale sessions from hiding the floating toolbar, and
add regression coverage for the validation policy.