My first idea was to restic unlock --max-age 1d (if it runs hourly, after 1d something probably didn’t work well).
DHCP lease-like behaviour sounds like a reasonable idea. I have nothing else to really say, other than:
Related: #2214 (not with locks, but wait for lock to be released)