append-tail approach in prior fixup commit produced a second partial copy
of the sanitize_image_model() method (lines 342-350 truncated + lines
351-362 complete). Replaced entire file with 353-line canonical version.
Agent-Session: phase2-admin-m1-engineer
b62b2cfb8f