fix(run-engine): the TTL sweep's defensive removal drains the group set for keyless queues

The defensive currentConcurrency removal in the TTL expiry script now
mirrors into the base groupConcurrency set whether or not the queue is
keyed, closing the last live release path where the mirror was
conditional on the queue shape instead of the removal itself.

Author: matt-aitken

internal-packages/run-engine/src/run-queue/index.ts

@@ -4709,8 +4709,16 @@ for i, member in ipairs(expiredMembers) do
       redis.call('SREM', envConcurrencyKey, runId)
       redis.call('SREM', envDequeuedKey, runId)
 
-      -- Rebalance CK index AND update counters if this is a CK queue
+      -- Mirror the currentConcurrency SREM into the base groupConcurrency set for
+      -- keyed and keyless queues alike, so a defensive removal always drains the
+      -- total pool too.
       local ckMatch = string.match(rawQueueKey, "(.-):ck:")
+      if removedFromCurrent == 1 then
+        local groupBase = ckMatch or rawQueueKey
+        redis.call('SREM', keyPrefix .. groupBase .. ":groupConcurrency", runId)
+      end
+
+      -- Rebalance CK index AND update counters if this is a CK queue
       if ckMatch then
         local lengthCounterKey = keyPrefix .. ckMatch .. ":lengthCounter"
         local runningCounterKey = keyPrefix .. ckMatch .. ":runningCounter"
@@ -4720,10 +4728,6 @@ for i, member in ipairs(expiredMembers) do
         if removedFromDequeued == 1 then
           decrFloored(runningCounterKey)
         end
-        -- Mirror the per-CK currentConcurrency SREM into the base groupConcurrency set
-        if removedFromCurrent == 1 then
-          redis.call('SREM', keyPrefix .. ckMatch .. ":groupConcurrency", runId)
-        end
 
         local ckIndexKey = keyPrefix .. ckMatch .. ":ckIndex"
         local earliest = redis.call('ZRANGE', queueKey, 0, 0, 'WITHSCORES')