Validate authoritative model metadata and unify MTP launch policy

Reject incomplete authoritative JANG family metadata before Electron spawns the engine while preserving legacy config fallback. Share native MTP argument resolution between the real launcher and settings preview so measured depth, conservative fallback, sampling policy, and external drafter exclusion cannot drift.