P1 CMR-11: metadata-checked consistent snapshot and tail bootstrap

Implement provider-owned snapshot export/import using the existing transaction adapter and committed-field decoder. Context mandatory, bounded input, source-consistent N and rows, strict model catalog, root/constants/tombstones, atomic bootstrap and stable duplicate acknowledgement after tail. Use an isolated P1 branch; qualify source before internal artifacts.