One host-authored Code Mode occurrence owned by the existing Conversation.

execute/3 fixes its caller as the lifetime owner. Observers may await or inspect without transferring ownership. A timeout does not cancel or replay execution. Restored runs are inspection-only; unfinished runs require host reconciliation.