It sounds like a relay hunting. AFAIK, the only relay is in the Pektron Wiper control module so out it came.
After a little patient safe breaking, I'm inside it without terminal damage to the case

I guess I was hoping to find a dry solder joint, or worse case, maybe a fried component, but all looks generally good. Maybe a little browning of the relay contacts, but not too bad. Anyway, have cleaned contact faces with fine emery cloth, just in case it makes any difference.
Next step will be to remove, re-grease and fit new brush plate to the motor.
Will post an update when rebuilt on whether problem solved. I might even try just plugging the module back in before doing the motor, just to see if the dirty contacts look like they were the route cause.
Tony