claimTerminationControl

Exclusively claims the trusted termination control plane.

The callback receives null for successful termination or the sealed runtime failure otherwise. It runs on a dedicated bounded control dispatcher that public terminationSignal observers cannot occupy. Exactly one controller may be claimed for this one-shot runtime; disposing the returned handle cancels delivery but does not make the claim reusable.

The callback must return promptly and offload blocking work.