storage: wrap orphan key-files cleanup in transaction