Give the mt-db submodules and the flagging suite headers
mt: seal the C1 loader invariant by type (Unscoped<T>), not a deny-list