Canonical installer contract: planner classifications, operator projection, automation trailer prefix, and default verify command.

Optional top-level manifest JSON metadata is additive and does not affect check_result/1 or tri-state exit semantics.