fix(flow-debugger): refuse method-entry Live runs for site-scoped users (#55)

Owner decision (b), 2026-11-09. An inbound API method has no site
affinity, so the F2 route-time scope only bounded routed SITE traffic;
the method's central-side effects (Database.*, ExternalSystem,
notifications) still ran for a scoped Deployer. FlowDebugRunner now
refuses FlowDebugRunMethodCommand for a site-scoped caller (site ids,
not Administrator) before the script executes, audits the refusal as a
failed InboundRequest under the operator's name, and raises
SiteScopeViolationException -> ManagementUnauthorized, so the Central
UI and the CLI (same /management command) share the gate.

The page disables the "Inbound API method" entry for scoped Deployers
with the reason (tooltip + inline note), starts them on script entry,
and ignores ?methodId= / a stored method choice. Replay and the
instance-scoped script / value-change Live runs are unchanged. The
route-time scope is kept as defence in depth.

Tests: scoped refused (in- and out-of-scope routing; script never runs,
refusal audited), unscoped/Administrator allowed, scoped Replay allowed,
scoped in-scope value-change Live still runs; bUnit for the disabled
entry, the drill-in, and the unscoped control. Mutation-proven (gate
and UI flag reverted -> 4 red).

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV

src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Pages/Deployment/FlowDebugger.razor

@@ -23,7 +23,9 @@
                 <label class="form-label form-label-sm">Entry point</label>
                 <div class="btn-group btn-group-sm d-block" role="group" aria-label="Entry point">
                     <button type="button" class="btn @(_entry == EntryKind.Method ? "btn-primary" : "btn-outline-secondary")"
-                            data-test="flow-entry-method" disabled="@_running" @onclick="() => SetEntryAsync(EntryKind.Method)">Inbound API method</button>
+                            data-test="flow-entry-method" disabled="@(_running || _methodLiveRefused)"
+                            title="@(_methodLiveRefused ? MethodLiveRefusedHint : null)"
+                            @onclick="() => SetEntryAsync(EntryKind.Method)">Inbound API method</button>
                     <button type="button" class="btn @(_entry == EntryKind.Script ? "btn-primary" : "btn-outline-secondary")"
                             data-test="flow-entry-script" disabled="@_running" @onclick="() => SetEntryAsync(EntryKind.Script)">Site script</button>
                 </div>
@@ -128,6 +130,13 @@
         </div>
     </div>
 
+    @if (_methodLiveRefused && _mode == FlowMode.Live)
+    {
+        <div class="text-muted small mb-2" data-test="flow-method-live-refused">
+            @MethodLiveRefusedHint
+        </div>
+    }
+
     @if (!_canLive)
     {
         <div class="text-muted small mb-2" data-test="flow-replay-only">