LoRA target expansion needs end-to-end authority binding
COR-3791 produced a reusable safety pattern: changing a LoRA target from `lm_head` to `all-linear` should be authorized end to end, not only at CLI parsing. Bind the target into the environment receipt, training plan, runtime authority, phase-boundary checks, and a BF16 anchor pr…