Bounded, explicit-tenant payload content pruning.
Each call transitions at most one deterministic batch of expired
content-bearing rows into audit-preserving :expired tombstones. It never
sweeps tenants, deletes rows, or treats a dispatching claim as retry-safe.
Summary
Functions
@spec prune(keyword()) :: {:ok, non_neg_integer()} | {:error, :tenant_required}