Controlled migration

MDR imports

Bounded CSV/XLSX validation, project-scoped preview, explicit commit and provenance-preserving rollback.