docs+test(r2-02): bulkhead doc sweep + parsed-knob-must-be-wired guard (01/U-6, OVERALL theme 1)

src/Tooling/ZB.MOM.WW.OtOpcUa.Analyzers/UnwrappedCapabilityCallAnalyzer.cs

@@ -12,7 +12,7 @@ namespace ZB.MOM.WW.OtOpcUa.Analyzers;
 ///     Diagnostic analyzer that flags direct invocations of Phase 6.1-wrapped driver-capability
 ///     methods when the call is NOT already running inside a <c>CapabilityInvoker.ExecuteAsync</c>
 ///     or <c>CapabilityInvoker.ExecuteWriteAsync</c> lambda. The wrapping is what gives us
-///     per-host breaker isolation, retry semantics, bulkhead-depth accounting, and alarm-ack
+///     per-host breaker isolation, retry semantics, in-flight-depth accounting, and alarm-ack
 ///     idempotence guards — raw calls bypass all of that.
 /// </summary>
 /// <remarks>
@@ -102,7 +102,7 @@ public sealed class UnwrappedCapabilityCallAnalyzer : DiagnosticAnalyzer
     private static readonly DiagnosticDescriptor Rule = new(
         id: DiagnosticId,
         title: "Driver capability call must be wrapped in CapabilityInvoker",
-        messageFormat: "Call to '{0}' is not wrapped in CapabilityInvoker.ExecuteAsync / ExecuteWriteAsync. Without the wrapping, Phase 6.1 resilience (retry, breaker, bulkhead, tracker telemetry) is bypassed for this call.",
+        messageFormat: "Call to '{0}' is not wrapped in CapabilityInvoker.ExecuteAsync / ExecuteWriteAsync. Without the wrapping, Phase 6.1 resilience (retry, breaker, tracker telemetry) is bypassed for this call.",
         category: "OtOpcUa.Resilience",
         defaultSeverity: DiagnosticSeverity.Warning,
         isEnabledByDefault: true,