direct SpectralMapper(...) and benchmark_mapping(...) Python signatures
are unchanged in this patch release
validate-prepared-library still requires an explicit --prepared-root
because it validates a user-selected runtime root rather than the default
published cache
the default CLI cache is versioned to the package release and revalidated
before reuse