* fix(image): pin standalone service model selection
Port the reviewed standalone image-service hardening from dev to the curated release branch and include its focused regressions.
Evidence: all four focused regression tests pass in an isolated runtime, and the staged diff check is clean. Coordinated-disclosure identifiers are intentionally omitted pending publication.
* chore(release): bump version to 1.0.3
Set the canonical application version for the curated hotfix release.
Evidence: APP_VERSION imports as 1.0.3 and the release workflow reads this source. No tag, package, or release artifact is created by this commit.
---------
Co-authored-by: nopoz <bill.lowney@gmail.com>
