Let a llama session be shown a picture where the model reads one

A multimodal model is loaded with the `mmproj` found beside its weights --
which is how a repository publishes the pair -- and an attached image rides
in the request as an `image_url` data URI, so it reaches a model on another
machine without the file going there. Nothing is done for a model without a
projector: no captioning, no OCR, no second model.

Whether a session takes pictures is measured rather than assumed:
`/props`'s `modalities.vision` from the server that loaded the model, in
three states, because a model still coming off disk has genuinely not said.
Unknown is offered rather than refused -- a control withheld because nobody
could ask goes missing from sessions that would have taken it. The answer
reaches the phone twice per model as `Event::Images`, so the photo button is
withdrawn the moment a model with vision is left rather than at whatever
later point the session row is fetched again.

A message carrying an image a model cannot read is stopped rather than
stripped: `llama-server` refuses the whole request over one image part, and
a message sent without its picture would be answered as though the picture
had never been mentioned. The phone will not attach one, and the driver
refuses it again at the three moments the answer can first exist -- at the
door, when a message queued behind a loading model is read, and at the tool
boundary a steer enters by. An earlier turn's image folds into a line of
words for a model without vision, so switching a conversation onto one does
not end it.

A projector is filtered out of the models a provider *offers*, since a
session started on one is a server that cannot load it; it stays in the
machine's own model list, where a file on a disk is managed.

Verified against ggml-org/SmolVLM-256M-Instruct-GGUF, local and over ssh:
"In this picture there is a red circle." Switching that session to
Qwen3-0.6B reports `refused`, refuses the next picture with the reason, and
still answers an ordinary message.

.claude/skills/ai-app-rigs/SKILL.md

@@ -166,6 +166,14 @@ Two models are downloaded under `~/.local/share/ai-app/models`:
   head. It is the rig for anything about `loading` being a state of its own,
   since 20s is long enough to send into.
 
+- `ggml-org/SmolVLM-256M-Instruct-GGUF/SmolVLM-256M-Instruct-Q8_0.gguf`,
+  175 MB, plus the `mmproj-…` beside it, downloaded 2026-09-20 as the rig for
+  **vision**: it is the only model here that reads pictures, it loads in
+  seconds on the CPU, and it described a red circle correctly. The pair is
+  also what exercises the projector being found beside the weights, and the
+  projector being kept out of the models a provider offers. Qwen3-0.6B beside
+  it is the other half of that rig -- the model that answers `refused`.
+
 **Do not test with a 2-bit quant**: the IQ2_XXS of the 0.6B produces fluent
 nonsense, which reads exactly like a broken driver — `llama-cli` produces the
 same from the file directly, which is how to tell the two apart in a hurry.