feat(audit): replay/pull include outbound API, DB and notification rows

GetTraceEventsAsync widens its channel filter to ScriptTrace ∪ ApiOutbound ∪
DbOutbound ∪ Notification ∪ (ApiInbound & InboundRequest) (plan D6); SecuredWrite,
Cluster and InboundAuthFailure rows in the same tree stay excluded. The site
SqliteAuditWriter.ReadByExecutionIdsAsync already had no channel predicate — pinned
by a test. Interface doc updated to match.

Claude-Session: https://claude.ai/code/session_01NcMG6xXdsJbmD2wYAgkK29

docs/plans/2026-09-06-flow-debugger-outbound-calls.md.tasks.json

@@ -17,7 +17,7 @@
     {
       "id": 2,
       "subject": "Task 2: Commons \u2014 FlowGraphBuilder groups operations, async branches, spawn edges, Response origin",
-      "status": "in_progress",
+      "status": "completed",
       "blockedBy": [
         0,
         1
@@ -26,7 +26,7 @@
     {
       "id": 3,
       "subject": "Task 3: Site runtime \u2014 outbound rows flow through the trace collector",
-      "status": "pending",
+      "status": "in_progress",
       "blockedBy": [
         0
       ]
@@ -34,7 +34,7 @@
     {
       "id": 4,
       "subject": "Task 4: Central \u2014 audit InboundDatabaseHelper (DbOutbound) and feed the trace sink",
-      "status": "pending",
+      "status": "in_progress",
       "blockedBy": [
         0
       ]
@@ -42,7 +42,7 @@
     {
       "id": 5,
       "subject": "Task 5: Central replay filter + site pull verification",
-      "status": "pending",
+      "status": "completed",
       "blockedBy": [
         0
       ]
@@ -96,5 +96,5 @@
       ]
     }
   ],
-  "lastUpdated": "2026-09-06T05:38:41.681788+00:00"
+  "lastUpdated": "2026-09-06T05:47:05.104042+00:00"
 }