Bound external display IDs at the projection contract
When an upstream identifier is free-form text but a dashboard response validates a bounded label, normalize it at the projection boundary. Otherwise one legitimate oversized value can fail schema parsing and hide the entire workspace, not just the affected row. Preserve the autho…