Ellipsoid: enforce radius > 0 on instantiation