orchestrator: Carry the re-armed deadline in WalkVerdict::Retry

Retry re-arms the window, but the caller had no way to know until
when — it would have had to reach into the checkpoint's timeout and
do the walker's arithmetic itself. Retry now carries deadline_millis
exactly like Waiting: one scheduling rule for both verdicts.

Assisted-by: Claude:claude-fable-5
Signed-off-by: Christina Quast <christina.quast@9elements.com>

services/orchestrator/capabilities/src/boot_watch.rs

diff --git a/services/orchestrator/capabilities/src/boot_watch.rs b/services/orchestrator/capabilities/src/boot_watch.rs
index 116be84..28de726 100644
--- a/services/orchestrator/capabilities/src/boot_watch.rs
+++ b/services/orchestrator/capabilities/src/boot_watch.rs
@@ -37,14 +37,19 @@
     Complete,
     /// The attempt failed — a window expired, or the device reported
     /// [`FailedRetriable`](crate::BootStatus::FailedRetriable) (which ends
-    /// the wait early) — and retry budget remains; the window is re-armed.
-    /// The caller re-resets the device and keeps polling — what a retry
-    /// re-runs is the caller's policy.
+    /// the wait early) — and retry budget remains; the window is re-armed
+    /// from the poll that judged it. The caller re-resets the device and
+    /// keeps polling — what a retry re-runs is the caller's policy.
     Retry {
         /// The checkpoint that failed.
         checkpoint: &'static str,
         /// Attempts left after this one.
         retries_left: u8,
+        /// When the re-armed window expires: the judging poll's
+        /// `now_millis` plus the checkpoint's `timeout`. The caller
+        /// schedules against this exactly as it does for `Waiting` —
+        /// no deadline arithmetic of its own.
+        deadline_millis: u64,
     },
     /// This boot is dead: retry budget exhausted, or the device reported
     /// [`FailedFatal`](crate::BootStatus::FailedFatal) — a verdict no
@@ -92,6 +97,7 @@
                 WalkVerdict::Retry {
                     checkpoint: "heartbeat",
                     retries_left: 1,
+                    deadline_millis: 30_000,
                 },
                 WalkVerdict::Dead {
                     checkpoint: "heartbeat",
@@ -113,7 +119,8 @@
                 },
                 WalkVerdict::Retry {
                     checkpoint: "heartbeat",
-                    retries_left: 1
+                    retries_left: 1,
+                    deadline_millis: 30_000
                 },
             ]
         );