`match_ms_engine()` implements the method-argument discipline (A14): [MsEngine] objects are first-class citizens and pass through unchanged; strings are sugar resolved against the engine registry. Resolution failure lists every available engine name. Resolving a non-certified engine (`certified` is `"self-reported"` or `"unknown"`) raises a one-time warning per session per engine.