Franklin Agent 3.29.16 — startup framing + dead-code cleanup

Franklin Agent 3.29.15 — spend-accounting integrity + prompt-injectio…

…n containment (round-10)

Franklin Agent 3.29.14 — close brace-expansion wallet read + 6to4 SSR…

…F (round-9)

Franklin Agent 3.29.13 — close 5 more single-command bypasses (round-…

…8 convergence verify)

Franklin Agent 3.29.12 — close 6 convergence-verify single-command by…

…passes (round-7) + media-write hole

Franklin 3.29.10 — close the 3.29.9 guard bypasses (adversarial re-re…

…view)

Franklin 3.29.9 — security hardening (round-5)

Franklin 3.29.8 — wallet spend-ceiling + paid-tool accounting (round-…

…4 money audit)

Franklin 3.29.7 — finish exa wire-format fix (prefetch twin) + budget…

…-safety follow-ups

feat(imagegen): pure price-math spend confirm + CHANGELOG for #86 (#88)

ImageGen had no spend confirmation after the media-router removal (#86) —
the router proposal was its only AskUser path. Add a pure price-math,
model-aware Generate/Cancel confirm (parity with VideoGen): interactive
callers see the model + estimated cost before any USDC is spent; direct
callers (desktop, no onAskUser) generate immediately.

Also document #86 in the CHANGELOG (3.29.4), including the upgrade note
that cloud sync is now opt-in (FRANKLIN_CLOUD_SYNC=on).

Co-authored-by: 1bcMax <195689928+1bcMax@users.noreply.github.com>