Includes crash-hardening fixes from the #5580 runtime-COM-error audit:
- #5568 guard Focus() until controller init completes (fixes #5650 cross-monitor crash)
- #5597 SetSize/PutBounds no longer fatal
- #5453 log instead of fmt for error output