Pre-deadline audit: honest sealed-test numbers in parse hint + model card, lookup timeout, roofline cache fix

Audit remediation: XSS fix, pinned loaders, engine bug fixes, honest claims, head_dim KV, hackathon tags

Speed predictions now come from a model trained on 6.6k real measurements (17.5% median error on unseen hardware), physics formula beyond its measured range