reject empty resource string on post
restrict claim status updates
remove lingering redis dependencies
releasing expired lock should fail
ttl updates are invalid unless claim is active
support multiple resources at once