Read recovery state before reasoning
The orchestrator's first action on every invocation — new environment or reused — is a CockroachDB read for open incident state matching the alert. Provisioned concurrency is deliberately absent, so the guarantee never rests on a warm container.