Fewer broken apps from generated code mistakes

The code linter now catches a common generation error where a prop is declared in the TypeScript type but never destructured, which used to crash the app at runtime with a ReferenceError as soon as the code path ran. The post-generation correction pass also now receives the integration manifest, so hallucinated app.<namespace> calls and unregistered workflow names are caught and fixed before reaching preview instead of only when the model happened to run validation itself.