Wait for Namespace runner terminal state

evolution/proposals/BEP-0009-release-infrastructure-and-store-upload-pipeline.md

@@ -113,6 +113,9 @@ The same change also makes the forge itself the release authority: release tags
 - Keep the shared Linux runner work directory out of macOS bootstraps. The
   dispatcher normalizes macOS runners to `/tmp/forgejo-runner` when the shared
   config points at Linux state paths such as `/var/lib/forgejo-runner`.
+- Do not destroy Namespace Linux runners until `nsc describe` shows a real
+  terminal container state or tombstone. Empty describe payloads mean the
+  environment is still starting, not that the one-job runner has finished.
 - Run forge Namespace services with the repo-owned `nsc` package and keep it
   current with the token format expected by Namespace. `nsc 0.0.520` is the
   first required baseline for revokable token-file auth. The dispatcher and