Rename misleading public Embedded* loaders to Reviewed/Load APIs, keep fail-closed HintsDir/-hints valves, and centralize wire provenance string literals behind named consts without changing Catalog values. Co-authored-by: Cursor <cursoragent@cursor.com>