TLN project I/O

Defines compatible input, staged saves, atomic output, and safe path relationships.

The UI project inside the input container is authoritative. Disk output is a single atomic commit of the latest staged model snapshot.