A successful MOVE (or fallback EXPUNGE) is an expunge we performed
ourselves: without the bump, an ingest window whose FETCH was captured
before the removal could commit stale rows and resurrect the archived
message locally (violates the expungeRevision invariant).
New MAILTERNAL_QA_ARCHIVE-gated live suite against the QA Dovecot:
single move + optimistic delete + delta, 25-op burst drain (asserts
generation-scoped absence: date-bucketed row ids legitimately reappear
on the Archive copy), and side-session EXPUNGE before drain. Burst
diagnosis artifacts documented in the postmortem dump path.