Fixed

• return 416 for invalid S3 ranges (#102)
• reject oversized Content-Range responses (#101)
• reset circuit breaker failures after recovery (#100)
• refresh latency snapshot at threshold boundary (#99)