fp16-safe conversion: fused x-logsumexp(x) tail; encoder weights byte-identical to upstream pin

initial commit