Bounded local job queue for cold-path work (ontology import, daemon reload, …).
Admin/UI layer may allocate; workers run one job at a time by default.