Require each selected package root to be a regular non-link directory before reading its bounded version.ini, and omit package-controlled observed contents from mismatch diagnostics. Full-selection preflight still completes before archive work or publication. Test Plan: - just test - just clippy - symlink-root and diagnostic-redaction regressions - git diff --check