An emergency patch bypasses the normal image scan stage, but admission still expects the scan metadata label and production refuses the deployment

The fast path skips validation intentionally, yet the runtime guardrail still requires proof that only the normal path produces.