static MARKER: &[u8]
Global marker recording the repair ran to completion.
Refused or unverifiable residue leaves it unwritten, so the next boot scans again.