Fix trailing [N] template leak: prompt v3 + post-processor

OOS denylist: catch recipes, capitals, populations

Auto 70B->8B fallback on rate-limit + broadened OOS refusal phrase

Out-of-scope intent + prompt-injection guards + per-intent cache TTL

Initial Space deployment