OOS denylist: catch recipes, capitals, populations

Out-of-scope intent + prompt-injection guards + per-intent cache TTL

Initial Space deployment