pub fn validate_models_endpoint(url: &str) -> Result<(), String>
Validate the pinned models URL (fail closed on host/path drift).