Do not publish the default all-off LED value until Windows supplies a
real HID output report. Treat the first all-off report as valid and
retain known state across pipe reconnects.
Serialize feedback processing with connection invalidation so a stale
message cannot restore validity after disconnect.