stopGracefully

Closes admission and flushes remaining windows. Completion waits for accepted writes and owned notification tasks, including their synchronous callbacks, but not late signal replay or caller-scheduled asynchronous work. Cancelling an observer does not cancel the shared shutdown process.