Add Bounded Ordinary HTTPS Idle Cleanup

tests/web_diagnostics/run.py

@@ -24,8 +24,10 @@ for name in ('traced_ticket_handler', 'traced_websocket_handler',
     match = re.search(r'static esp_err_t ' + name + r'\(httpd_req_t \*request\)\n\{.*?\n\}', server, re.S)
     assert match, name
     wrappers.append(match.group())
-# This slice must not take over cleanup, add async probes, or enable SDK logging.
-assert 'config.user_cb = web_diagnostics_tls;' in server
+# Diagnostics itself must remain observation-only. The server composes the
+# independent, always-on idle policy before diagnostic publication.
+assert 'config.user_cb = tls_session_callback;' in server
+assert 'web_httpd_idle_tls(arg);\n    web_diagnostics_tls(arg);' in server
 assert 'config.httpd.close_fn' not in server and 'config.httpd.open_fn' not in server
 source = (ROOT / 'src/web_diagnostics.c').read_text()
 for forbidden in ('httpd_queue_work', 'httpd_get_client_list', 'esp_event_handler_register',