Hardens SDK-owned egress paths (cloud URLs, telemetry, tracing headers,
dataset paths) to fail closed, and corrects the multi-objective and
early-stopping machinery that decides which configuration wins.

Promoted to main via #2062.