R-1254 (controller half): escrow claim/confirm outwait the agent (60 s); an unknown confirm outcome promises nothing

504 from the agent (it cannot learn which package the hub holds) or a failed call -> api.escrow.confirm_store_unknown
(hu+en); only 502 keeps 'your previous code still works'. Tests TestR1254_* red before the fix. Commit only.

CHANGELOG.md

@@ -23,6 +23,14 @@ night report (`audits/night-2026-10-28/`).
   `LoadKeptOffsite`) return `ErrRestoreBusy` with nothing started, and `LoadKeptApp` takes the dated folder's file move
   as `prepare`, inside the operation. The install-time „use my kept data" asks about the second-drive copy too
   (`RestoreBusy`, was RestoreStatus/IsRunning only). Tests `TestR1256_H6_*` (backup, web, api).
+- **R-1254 H2, the controller half (felhom.eu R-1254; agent `5ddd124`):** the escrow claim and confirm reach the agent
+  with their own 60 s timeout (`agentapi.escrowCallTimeout`; was the client's 15 s) — the agent may spend its 30 s
+  upload plus 15 s asking the hub before it answers, and a claim abandoned at 15 s could still store a package whose
+  code reached nobody. The confirm's household sentence: 502 (the hub holds another package) keeps „…a régi kódod
+  továbbra is érvényes…"; 504 (the agent cannot learn the outcome) or a failed call (0) now reads
+  `api.escrow.confirm_store_unknown` („Nem tudjuk biztosan… Őrizd meg mindkét kódot…", hu + en) and never promises the
+  previous code. `TestR1151_ConfirmAnswersInTheBoxLanguage`'s status-0 case changes with it, on purpose. Tests
+  `TestR1254_*` (agentapi, web), red before the fix.
 - **H8 — `internal/backup/restore_copy_sweep.go`:** an unused restore copy goes after 14 days. Every 6 hours
   (`restore-copy-sweep`) a copy is removed only when the app has no restore hold of any kind, the app-stop marker is
   readable and does not name the app, no restore runs, and the copy is older than 14 days. Tests `TestR1256_H8_*`