Retry retryable worker failures once before failing the session (#898)

The harness gives up after three attempts and the worker dies even though no tool ran yet. One outer retry with backoff recovers the flake without another orchestrator round-trip, guarded against tool replay and bounded so it cannot multiply sends.

Author: TheGreatAxios