Wave 49: Deep pass: conversion path hardening

API guards, trust copy, metadata hygiene, dependency audit, broken script cleanup, and live verification across the Express Intent conversion path.