fix(core): skip executable config imports

Merge the config-import hardening fix.

- skip executable/sensitive config fields during import preview
- keep CLAUDE.md guidance conditional on what was written
- avoid double-counting kept fields when model is absent
- add regression coverage for missing-model kept counts

Author: BunsDev