fix(sql): row-cap key-value and where-pair plans with a TOP/LIMIT N+1 dialect seam (R06:S-1)

Key-value and where-pair plans had no row limit, so a selector pointed at a history
or events table materialised every matching row on every poll. ISqlDialect gains
RowLimitPrefix/RowLimitSuffix(n) (SQL Server TOP (n), Postgres LIMIT n, Oracle FETCH
FIRST n ROWS ONLY); plans carry a RowCap (distinct keys, or 1) and ask for RowCap+1
rows; the reader also stops client-side at RowCap+1. Getting the extra row proves the
selector ambiguous: the group publishes BadConfigurationError with a rate-limited
warning. The reader reports those answered refusals so the driver counts them as
answer evidence, and any refusal-only poll now restores Healthy after a comms fault.

Refs #744
Claude-Session: https://claude.ai/code/session_01Ub9hGmYLQvn9XETzw7CMsT

tests/Drivers/ZB.MOM.WW.OtOpcUa.Driver.Sql.Tests/SqlServerDialectTests.cs

@@ -13,6 +13,15 @@ namespace ZB.MOM.WW.OtOpcUa.Driver.Sql.Tests;
 /// </summary>
 public class SqlServerDialectTests
 {
+    [Fact]
+    public void RowLimit_isTopN_inThePrefixPosition()
+    {
+        var d = new SqlServerDialect();
+        d.RowLimitPrefix(3).ShouldBe("TOP (3) ");
+        d.RowLimitSuffix(3).ShouldBe("");
+        Should.Throw<ArgumentOutOfRangeException>(() => d.RowLimitPrefix(0));
+    }
+
     [Fact]
     public void QuoteIdentifier_bracketsAndEscapesEmbeddedBrackets()
     {