JSON-schema-coerced tool dispatch: catching prompt injection at the boundary

Compile-time-checked tool shapes. JSON-schema validation between SLM output and Swift function dispatch. Why this is the right prompt-injection layer.