Robustness guards for the SUSPENDED UCITS routing: reject an unknown --venue
value instead of silently treating a typo as 'us'; refuse --venue ucits
without --broker ibkr (UCITS ETFs are LSE/Euronext-listed, IBKR-only);
apply_ucits_map now raises on a non-injective map (two sleeves mapping to
the same ticker would otherwise silently drop one via dict-key collision).
Adds coverage that the shipped default map maps every FUND_INSTRUMENTS
sleeve, so a future sleeve added without a UCITS mapping fails loudly.