feat!: track MLflow in SQLite and harden the canonical gate (#129)