dedicated reliability endpoint instead of the customer's `track(_:)`
pipeline. Independent-controller flow per Privacy Policy §6;
schema-locked by `contracts/diagnostics/contract-failed-payload-
schema-lock.json`. `ContractFailureInput.extra` removed (schema-lock
forbids unbounded fields); `ContractFailureInput.deviceClass` added.