Function select_break_glass_candidate 

pub fn select_break_glass_candidate(
    candidates: &[(i64, u64, u64)],
) -> Option<usize>

Select the earliest (expiry, UUID high bits, UUID low bits) key; on an exact duplicate key, the first index wins.