Retry Storms: Simulate How a 30-Second Blip Becomes an Outage That Never Ends

Three layers that each try 3 times can send 27x the load to a database. Simulate the retry storm in plain Python, then end it with a 10% retry budget.