Auto

Mint a per-incarnation auto id (ClientId.auto) and re-mint it on a detected collision. Gives at-least-once forwarding dedup within one process incarnation but no exactly-once across a crash (the id changes on restart). The default for callers that don't persist an identity.