Say a transcript's size, name a model by something, and ask before a reload

Five things asked for on the phone, and one trap behind the first of them.

A llama prompt carries `<__media__>` where a picture was, and llama.cpp
pairs each marker with a decoded image when it tokenizes -- so a marker in
words nobody attached a picture to fails the turn, and then fails every
later one, since the conversation is folded out of a transcript that holds
it for good. A model saying the marker back is enough to do it. Every
message with words in it now goes through `without_marker`.

A model's `general.name` is filled in by whatever converted the file, and
`convert_hf_to_gguf.py` fills it from the directory it converted: Prism ML's
Bonsai publishes `general.name = "Hf"`, which is unique and so passed the
label cascade and told a reader nothing. A name is now used only where it
shares a word with the repo or the file it came from; one that does not
drops to the file name.

The model settings dialog and the server card said what a save would cost in
a paragraph under the control, read after the decision if at all. Both ask
instead, in the shape the rest of that screen already uses for Stop and
Delete -- and the dialog's question is asked over the edits, so Cancel comes
back to them.

A field's label was `labelMedium` in the variant colour while every setting
beside it was body text, which on one form read as two ranks of setting.

`GET /sessions/{id}`'s `transcriptFile` now carries the file's size, and the
settings screen draws it beside what this phone has cached.

Checked on the emulator against the sandbox: the labels line up, the row
says "14 kB · 14 kB cached", and both confirmations appear over a loaded
Qwen3-0.6B. `cargo test` 275 passed, clippy and fmt clean, lint clean.

AGENTS.md

@@ -523,6 +523,17 @@ written, and the fold uses that same predicate to decide a reply is settled.
   `generate` now fails the turn for both -- a reply that stops early is not a
   reply, and the transcript keeps whatever arrived before it.
 
+- **`<__media__>` in a llama prompt is a picture, wherever it came from.**
+  llama.cpp takes an image out of the request and leaves that marker in the
+  rendered text, then pairs each marker with a decoded image at tokenize time
+  -- so one in words nobody attached a picture to fails the turn with `number
+  of media markers in text (1) exceeds number of bitmaps (0)`, which reaches
+  the phone as "Failed to tokenize prompt". A model saying it back is enough,
+  and then *every* later message fails too, since the conversation is folded
+  out of a transcript that now holds it. `Message::new` and
+  `Message::from_user` take it out of anything that is text (`without_marker`),
+  which is every message with words in it.
+
 - **A cancel flag is only as prompt as the next place somebody looks.** A
   llama turn waits on three things that look nowhere at all: a permission
   question, a tool call `llama-server` is running (a shell command there runs