fix(opcuaclient): #676 review fix-ups (port-less rewrite, full reconcile, delivery lock, timers)

1. RewriteEndpointUrl keeps the advertised port when the configured URL names none
   (Uri.Port -1 would have sent the session to 4840); port-less + IPv6 tests.
2. The trailing re-read repairs any (value, status) difference that is not older than
   the last delivered value — Good->Bad/Uncertain included; a read without a source
   timestamp counts as newer; an equal source time with different content is published
   (repairs the replay guard's by-design equal-timestamp drop).
3. One driver-wide delivery lock makes decide+publish atomic across live notifications,
   the recovery read and the trailing read, so an older value can never land after a
   newer one (deterministic race test via a seam).
4. Known gap documented: a ConnectionLost raised while the host is not Connected is
   swallowed and that session falls back to the watchdog.
5. Only a SERVER-reported subscription loss raises ConnectionLost; the publishing-stall
   heuristic stays with the #527 watchdog.
6. Post-recovery timers run on Task.Delay(…, Clock, ct) with a session-work CTS
   cancelled on session release and dispose.
7. Replay summary at Information only when something was dropped (Debug otherwise);
   a re-arm reports the superseded window's drops and counts afresh.
8. DriverInstanceActor: AttachHostStatusSource doc comment restored; Reconnecting
   swallows a stray DisconnectObserved (test).
9. Stall wire test: 120 s session timeout, 3000-cycle subscription lifetime, one further
   bad keep-alive tick, 60 s headroom on the post-recovery waits (5/5 green).

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/Drivers/DriverInstanceActor.cs

@@ -512,8 +512,7 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
         Receive<DisconnectObserved>(msg => HandleDisconnectObserved(msg.Reason));
         // #676 — the driver KNOWS its connection is gone (e.g. OpcUaClient: the upstream server halted or forgot the
         // session). Same handling as the watchdog's disconnect, minus the ~90 s of silence it would need to prove it.
-        // Handled inline rather than re-told as DisconnectObserved, so it cannot land in Reconnecting as an unhandled
-        // message.
+        // Handled inline rather than re-told as DisconnectObserved (Reconnecting also swallows a stray DisconnectObserved).
         Receive<ConnectionLossRaised>(msg => HandleDisconnectObserved($"driver reported connection lost: {msg.Args.Reason}"));
         Receive<ForceReconnect>(_ =>
         {
@@ -771,6 +770,9 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
         Receive<SetDesiredSubscriptions>(StoreDesiredSubscriptions);
         Receive<ForceReconnect>(_ => { /* already reconnecting — no-op */ });
         Receive<ConnectionLossRaised>(IgnoreConnectionLoss);
+        // A watchdog DisconnectObserved self-sent on the Connected tick can still be queued when a ConnectionLossRaised
+        // (or another trip) has already moved us here — already reconnecting, so it is a no-op, not an Unhandled.
+        Receive<DisconnectObserved>(_ => { /* already reconnecting — no-op */ });
         // ResubscribeDesired self-Tells Subscribe; HandleSubscribeAsync replies SubscriptionEstablished to the
         // sender, which on the self-resubscribe path is Self. Swallow it (trace only) so it doesn't dead-letter.
         Receive<SubscriptionEstablished>(msg =>
@@ -1108,10 +1110,6 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
         _rediscoveryHandler = null;
     }
 
-    /// <summary>Subscribe the driver's <see cref="IHostConnectivityProbe.OnHostStatusChanged"/> (if it is
-    /// one), marshaling each transition to the actor thread. Idempotent; mirrors
-    /// <see cref="AttachRediscoverySource"/>, including the PreStart-not-per-connect placement — a probe
-    /// loop can report a host down while the driver itself is between connects.</summary>
     /// <summary>
     ///     Subscribe the driver's <see cref="IDriverConnectionLossSource.ConnectionLost"/> (#676), if it is one,
     ///     marshalling each raise to the actor thread — actor state is never touched on the driver's thread. Attached
@@ -1156,6 +1154,10 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
         PublishHealthSnapshot();
     }
 
+    /// <summary>Subscribe the driver's <see cref="IHostConnectivityProbe.OnHostStatusChanged"/> (if it is
+    /// one), marshaling each transition to the actor thread. Idempotent; mirrors
+    /// <see cref="AttachRediscoverySource"/>, including the PreStart-not-per-connect placement — a probe
+    /// loop can report a host down while the driver itself is between connects.</summary>
     private void AttachHostStatusSource()
     {
         if (_driver is not IHostConnectivityProbe src || _hostStatusHandler is not null) return;