per-request MT5 lock + per-call SDK timeouts + queue-depth backpressure (fixes wedge-induced connection-refused)