Global in-flight byte budget, shared by pipeline threads (which add on
enqueue to sink queues) and sink workers (which subtract when a batch is
acknowledged or abandoned).
This is a heuristic gauge, not a synchronization point: decisions taken
on a slightly stale reading are corrected on the next poll iteration and
absorbed by the controller’s hysteresis, so all operations use
Ordering::Relaxed. Atomic read-modify-write operations cannot lose
updates even under Relaxed (every RMW observes the latest value in the
modification order); relaxation only permits stale reads in
InflightBudget::usage, which the hysteresis absorbs. Both directions
saturate — sub can never underflow past zero even if an
acknowledgement races ahead of the bookkeeping that added its bytes.