Audit remediation: XSS fix, pinned loaders, engine bug fixes, honest claims, head_dim KV, hackathon tags

Vision/diffusion compute-roofline speed (FPS + s/image); fine-tune VRAM validation+sweep; flag-gated eager model load

Catalogue now 110 official models; GGUF size fix

Real catalogue: 83 verified models, buy-advice mode, live model lookup, license-aware cards