fix: handle late host rejections after cancellation (#503)

* fix: settle trusted host operations after cancellation

* test: reduce cancellation regression to one crash case

* refactor: dedupe host settlement cleanup and clarify comments

---------

Co-authored-by: Hiroki Osame <hiroki.osame@gmail.com>