- Claim the picker-owned temp movie synchronously inside the picker
delegate with FileManager.moveItem before returning, so the picker's
post-dismissal cleanup can no longer delete the source while a
background copy is reading it.
- Deliver the captured movie to the staging flow immediately; heavy
staging and thumbnail work still runs off the main thread.
- Add a verify.sh invariant for the synchronous movie claim.