scheduler: config-threaded TLS/backoff + due window; rand + justfile fixes

scheduler: config-threaded TLS/backoff + due window; rand + justfile fixes #2