fix: post-0.14.1 flakefix + strict-mode init_or_die

[maltsev-dev]

Summary

Closes the CI failure mode that run 30088911608 surfaced on the post-merge push to master after #77 (0.14.1 release). Two distinct problems in one squash commit.

1. flakefix: @pytest.mark.rerunfailures wrong kwarg + tight release window

The Sprint 0 (PR #76) follow-up shipped @pytest.mark.rerunfailures(max_retries=2) on tests/test_approval_timeout_field.py::TestApprovalTimeoutResolution::test_env_fallback_when_server_value_is_zero. That kwarg was deprecated in pytest-rerunfailures 15.x (the version pinned in dev), so the marker was a no-op on CI and the release-window race stayed flaky.

Two-part fix:

• Use the documented reruns=2 kwarg so the marker actually triggers a retry on the inner helper.
• Widen release_after_ms from 50ms to 200ms. Still well below the 120s env default timeout so the test stays fast on CI, but enough headroom that the spawned worker thread reliably reaches event.wait() before the main thread fires the WS release.

2. strict-mode survives init_or_die() reinit

Surfaced on branch fix/gap-1c-approval-timeout after PR #76 was merged as squash 0092d11. The pre-fix code had a four-cell state space (extractor present × runtime registry has the tool name) for the sensitive-tool check. The @sensitive(impact=...) decorator stamped _nullrun_extractor on the @protect wrapper (not on the user function), so a reinit that tore down the wrapper broke the lookup. The fix pins _nullrun_extractor to the runtime registry as well so a reinit that replaces the wrapper still finds the extractor.

Verification

pytest -n auto --cov=src/nullrun --cov-branch
        --cov-report=xml --cov-fail-under=0
  → 1367 passed, 7 skipped, 29 warnings in 34.54s, coverage 81.45%
ruff check src/ tests/   → All checks passed
mypy src/                → Success: no issues found in 36 source files

Compatibility

• No SDK_MIN_VERSION bump. No on-wire change. No public API change.

Diff vs origin/master: +191/-19 across 4 files (src/nullrun/decorators.py, src/nullrun/runtime.py, src/nullrun/transport.py, tests/test_approval_timeout_field.py).

[codecov]

Codecov Report

❌ Patch coverage is 67.85714% with 9 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/nullrun/decorators.py	70.58%	3 Missing and 2 partials ⚠️
src/nullrun/transport.py	0.00%	2 Missing and 2 partials ⚠️

📢 Thoughts on this report? Let us know!