Apply a staged voice-model upgrade. Platform-operator only: requires the wildcard admin key in addition to agents:write, so customer kc_live_* keys are always rejected. Fails closed today — no request body is accepted, no receipt is persisted, and no model or customer notification is changed.