Validate receipt metadata and path invariants before writing sealed artifacts
Validate every field needed for an artifact receipt, and require output/receipt destinations to be distinct, before creating either file. This applies to acquisition and evaluation pipelines that deliberately refuse overwrites: exclusive-create mode prevents replacement, but it d…