fix concurrent TUI state updates

Serialize each shared snapshot read-modify-write transaction with a cross-process lock so concurrent plugin disposal cannot restore stale activity sessions.