pub fn spawn_rss_sampler(admission: Arc<Admission>)
Background sampler: refreshes the shared RSS gauge every 500 ms so the admission breaker reads a cheap atomic, never the filesystem, per request.