fix(cctv): bound HLS sessions and isolate consumer playback leases

TESTING.md

@@ -212,15 +212,15 @@ While recording, call out anything in these areas — this is the feedback I mos
 
 ---
 
-## 6. Live video CCTV (HLS / RTMP) — soak, no mic
+## 6. Live video CCTV (HTTPS HLS) — soak, no mic
 
-> Requires the DelDOT pack (loads by default; `CCTV_DELDOT_ENABLED=0` disables it) and, for RTMP cameras, `ffmpeg` on the server's PATH.
+> Requires the DelDOT pack (loads by default; `CCTV_DELDOT_ENABLED=0` disables it).
 
-1. Turn on **CCTV**, fly to Dover, DE, and activate **DE 1 @ Main Toll Plaza**. ✅ Within ~10 s the monitor plane and the panel preview both show moving video, and the panel widens for it.
+1. Turn on **CCTV**, fly to Dover, DE, and activate **DE 1 @ Main Toll Plaza**. ✅ Within ~30 s the monitor plane and the panel preview both show moving video,.
 2. Leave it for **five minutes**. ✅ Continuous playback; at most a short hitch about once a minute (the agency restarts its stream on a timer). ❌ A freeze that does not recover, or the panel picture stopping while the plane keeps moving.
 3. Toggle **PROJECTION** off. ✅ The panel keeps playing; the plane and the active camera's cone hide.
 4. Switch to **DE 8 @ Saulsbury Rd**, then back. ✅ Each switch resumes within ~10 s with no stale frame from the previous camera.
-5. Optional: DevTools → Network, filter `media/`. ✅ Playlist responses carry `X-CCTV-Source: ffmpeg-remux` (RTMP) or `hls-pull` (HLS); segments return `video/mp2t`.
+5. Optional: DevTools → Network, filter `media/`. ✅ Playlist responses carry `X-CCTV-Source: hls-pull`; segments return `video/mp2t`.
 
 ## If something looks off