HSRP preempt delay is shorter than upstream route convergence and gateway flaps twice on recovery

Failover succeeds initially, but recovery creates another outage because the active gateway returns before its upstream dependencies are ready.