feat(cloud): enforce host governance budgets

apps/cloud-api/cloud_api/app.py

@@ -301,6 +301,12 @@ def create_app(
             auth_provider=auth_provider,
             lease_duration_seconds=control_config.lease_duration_seconds,
             scheduler=scheduler,
+            planner_token_reservation_ceiling=(
+                control_config.planner_token_reservation_ceiling
+            ),
+            planner_token_reservation_ttl_seconds=(
+                control_config.planner_token_reservation_ttl_seconds
+            ),
         )
     )
 
@@ -397,6 +403,10 @@ async def _run_lease_reaper_loop(
                 now=utc_now(),
                 max_attempts=max_attempts,
             )
+            services.repository.cleanup_expired_token_reservations(
+                now=utc_now(),
+                limit=100,
+            )
         except Exception:
             logger.exception(
                 "cloud lifecycle iteration failed",