An empty balance should not spend the retry budget #195

A job that fails on OutOfCredit still spends its three attempts at 30s, 120s and 270s. A balance does not refill in seven minutes, so the retries only restate the same error and delay the failure the operator needs to see.

RateLimited deserves those retries; #176 separated the two types precisely because one recovers on its own and the other does not. The retry policy has not caught up with that split.

Either skip retries for OutOfCredit, or give the job table a way for a handler to say "this one is final".