Move clearTimeout from try body to finally block in both session-start scripts to prevent timer leaks on fetch errors. Constraint: Fetch abort controller requires timeout to be cleared Confidence: high Scope-risk: narrow