Try to get the entity-graph provider from a [CatalogManager] weak reference.
Returns None when the manager is not the kv-backed one or the provider has
not been injected yet (the computed graph tables then stream empty).
System table predicates are inexact: the frontend keeps a residual filter. Dropping
an unsafe remote filter preserves correctness only if no remote limit truncates it.