Close the collapse's two dropped guarantees: latch applyMode against re-entrancy, pin its project once; correct three overclaiming doc lines

src/app/main.cpp

@@ -189,7 +189,11 @@ static void OnTimer()
     // signal re-arms the bank panel's new-content detector — notified BEFORE the
     // reapply so re-arm and model restore ride the one load event (otherwise
     // pre-existing tracks can be mis-detected as "new" and mass-tagged).
-    if (g_session.consumeLoadSignal()) {
+    // modeApplyInProgress is tested BEFORE the consume, not after the applyMode call:
+    // the load signal is one-shot, a re-entered applyMode fails closed, and a reapply
+    // dropped here is the saved mode never applied at all. Holding the whole block
+    // back one tick also keeps the panel re-arm ahead of the reapply.
+    if (!reasampler::modeApplyInProgress() && g_session.consumeLoadSignal()) {
         reasampler::bankPanelNotifyProjectLoaded();
         // Reconcile lane ownership against the live project's lanes (P_LANENAME,
         // the cross-session source of truth) BEFORE reapplying visibility. Never