feat(inbound-api): InvalidateMethod seam purging handler + known-bad — consumer entry point for the script-artifact invalidation contract (plan 05)

Claude-Session: https://claude.ai/code/session_01MtdgwpEeCUn6cUA5f1LMPj

src/ZB.MOM.WW.ScadaBridge.InboundAPI/InboundScriptExecutor.cs

@@ -110,14 +110,26 @@ public class InboundScriptExecutor
     }
 
     /// <summary>
-    /// Removes a compiled script handler for a method name.
+    /// Drops the compiled handler AND any known-bad record for the method. The
+    /// consumption seam for the script-artifact invalidation contract (bundle import,
+    /// out-of-band updates, failover activation). Safe to call for unknown names.
+    /// The per-request revision check in ExecuteAsync remains the correctness
+    /// fallback when an invalidation is missed.
     /// </summary>
-    /// <param name="methodName">The method name to remove.</param>
-    public void RemoveHandler(string methodName)
+    /// <param name="methodName">The method name to invalidate.</param>
+    public void InvalidateMethod(string methodName)
     {
         _scriptHandlers.TryRemove(methodName, out _);
+        _knownBadMethods.TryRemove(methodName, out _);
     }
 
+    /// <summary>
+    /// Removes a compiled script handler for a method name. Delegates to
+    /// <see cref="InvalidateMethod"/> (public API preserved).
+    /// </summary>
+    /// <param name="methodName">The method name to remove.</param>
+    public void RemoveHandler(string methodName) => InvalidateMethod(methodName);
+
     /// <summary>
     /// Compiles and registers a single API method script. Returns <c>false</c> if the
     /// script is empty, fails Roslyn compilation, or violates the script trust model.

src/ZB.MOM.WW.ScadaBridge.ManagementService/ManagementActor.cs

@@ -2651,7 +2651,7 @@ public class ManagementActor : ReceiveActor
         await repo.DeleteApiMethodAsync(cmd.ApiMethodId);
         await repo.SaveChangesAsync();
         if (method != null)
-            sp.GetService<InboundAPI.InboundScriptExecutor>()?.RemoveHandler(method.Name);
+            sp.GetService<InboundAPI.InboundScriptExecutor>()?.InvalidateMethod(method.Name);
         await AuditAsync(sp, user, "Delete", "ApiMethod", cmd.ApiMethodId.ToString(), method?.Name ?? cmd.ApiMethodId.ToString(), null);
         return true;
     }