delist-after-reconcile-enforcement

Run delist or blocklist enforcement after synchronization so removals update both metrics and downstream refresh signals.