refactor: cleanup() should be atomic transaction

In semantic response caching (PR #2029), cleanup() does DELETE + UPDATE separately. Should wrap in transaction to ensure consistency. See PR review for details.