Model-service operations

Ship approved model endpoints without product-local serving paths.

Atlas owns publish checks, endpoint state, model-server bindings, credentials, prediction records, feedback copies, and request logs.