feat(plugin): govern xiaoyunque model catalog

[superche]

Summary

• restrict XiaoYunque image generation to Seedream 5.0 and Seedream 5.0 Pro
• restrict video generation to Seedance 2.0, Seedance 2.0 Mini Lite, Seedance 2.0 Vision, and Seedance 2.0 Mini
• make Seedream 5.0 the default image model and Seedance 2.0 Mini Lite the default video model
• keep the Plugin manifest, MCP tools/list catalog, live smoke defaults, docs, and regression tests synchronized
• bump the Plugin to 0.3.3, the companion to 0.3.1, and Registry sequence to 22

Why

The XiaoYunque catalog exposed models outside the approved product channels, and its ordering selected the wrong defaults. This change replaces discovery-driven exposure with an explicit governed allowlist so the picker and executable MCP surface cannot drift apart.

Impact

Users see only the approved image and video models. The first model for each output is now the intended default, and removed models are no longer exposed as callable generation tools.

Validation

• bun install --frozen-lockfile --ignore-scripts
• bun run workspaces:build:packages
• bun run validate
• workspace tests: FFmpeg 33/33 and XiaoYunque 106/106
• focused model catalog tests: 4/4
• MCP process tests: 8/8
• tooling tests: 52/52
• XiaoYunque source typecheck with --skipLibCheck
• bun run build:companions
• bun run pack
• bun run build:index

The standard workspace typecheck remains blocked by the existing Bun/Node declaration mismatch in the unchanged FFmpeg workspace. Billable live generation smokes were not run.