perf(templates): resync and resolved-members read only the chain/subtree (ScadaBridge#89)

The last two whole-library template reads are gone. Both fed the
inheritance-only TemplateInheritanceResolver, which walks one template's
parent chain and never follows compositions.

- TemplateService.ResyncInheritedMembersAsync (operator repair, CLI + editor)
  now reads #86's GetTemplateReconcileClosureAsync (derived subtree + the
  template's chain, tracked). When nothing derives from the template the
  closure is empty, so it falls back to the new tracked
  GetTemplateChainAsync - resyncing a leaf reads only its own chain.
- ManagementActor.HandleGetResolvedTemplateMembers now reads
  GetTemplateChainAsync(id, trackChanges: false): the chain alone, untracked,
  with script bodies (the resolver projects script code, so #66's body-free
  analysis closure would not be equivalent).

The chain walk is factored out of TemplateReconcileClosure into
CollectChainAsync (one load per level, stops on parent cycles and dangling
parents) and shared by both.

Evidence:
- TemplateChainReadTests (#86 fixture): for every template plus an unknown
  id, the closure-backed resync issues exactly the writes, audit row and
  result of the whole-graph resync with GetAllTemplatesAsync wired to throw;
  the resolver answers identically from the chain and the whole graph.
  17 of these fail against the old service; 13 fail with the leaf chain
  fallback removed (mutation-checked).
- TemplateChainRepositoryTests (SQLite, recorded SQL): a 4-deep chain loads
  4 templates / 8 attributes instead of 46 / 92, one split-query set per
  level, untracked on request and tracked for the resync.
- ResolvedTemplateMembersReadTests: the actor answers from the untracked
  chain read and never calls GetAllTemplatesAsync (fails on the old actor).

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV

src/ZB.MOM.WW.ScadaBridge.ManagementService/ManagementActor.cs

@@ -869,15 +869,15 @@ public class ManagementActor : ReceiveActor
     /// <summary>
     /// Read-only authoring resolve: returns the effective inherited
     /// member set for a template — computed fresh from the full inheritance
-    /// chain — plus a staleness summary. Loads every template (children
-    /// eager-loaded) so the resolver can walk an arbitrary-depth chain; never
-    /// mutates stored rows.
+    /// chain — plus a staleness summary. The resolver is inheritance-only, so it
+    /// loads just the template's own chain, untracked (Gitea #89) — never the
+    /// whole library; never mutates stored rows.
     /// </summary>
     private static async Task<object?> HandleGetResolvedTemplateMembers(IServiceProvider sp, GetResolvedTemplateMembersCommand cmd)
     {
         var repo = sp.GetRequiredService<ITemplateEngineRepository>();
-        var allTemplates = await repo.GetAllTemplatesAsync();
-        return TemplateInheritanceResolver.Resolve(cmd.TemplateId, allTemplates);
+        var chain = await repo.GetTemplateChainAsync(cmd.TemplateId, trackChanges: false);
+        return TemplateInheritanceResolver.Resolve(cmd.TemplateId, chain);
     }
 
     /// <summary>