Periodic retention purge loop.

Runs one purge at boot — before the replay stores hydrate, so purged data never reappears in memory — and then hourly, honoring the stored policy on every cycle. The "session" policy only purges at boot; data accumulated during the current session is kept until the next restart.