feat(focas): CNC alarms reach Part 9 conditions via ALARM: tags (#647)

An ALARM: address (*, <Type>, <Type>/<n>, <Type>/<lo>-<hi>, T<code>, OTHER) on a raw tag that
also carries the cross-driver alarm object is ONE condition with ConditionId == RawPath and a
Kind (Raise / Retrigger / Clear), so DriverHostActor.ForwardNativeAlarm routes it and
NativeAlarmProjector activates it. Fixes all seven triage defects:

1. SubscribeAlarmsAsync treated the host's RawPaths as device hosts -> nothing polled.
2. Decorated "{host}#{Type}:{Number}" ConditionId -> every event dropped.
3. No Kind -> projector kept prior state.
4. WireFocasClient.ReadAlarmsAsync answered [] on failure -> mass clear + un-acked re-raise.
   It now throws; a failed device read keeps every condition's state.
5. Acks lost on reconnect -> told-record dedup (MTConnect #626 pattern) held for the driver's
   lifetime; same-set re-subscribe / re-init re-raise nothing; changed set prunes leavers only.
6. Subscribe threw while AlarmProjection.Enabled=false -> the tag is the opt-in; flag is a no-op.
7. Alarm tags could not be authored -> ALARM: grammar (FocasAlarmSelector, Contracts) backs the
   editor, the address picker, the deploy-time inspector and driver init.

Severity: authored alarm.severity -> exact OpcUaSeverity; else the 16i-era type bucket. The type
table stays the only one (moved to Contracts, documented 16i-era; 30i codes not invented; raw
T<code> selector + raw code in every message). Read-only: ack is server-side. Also clears the
value table on a re-initialise (#630 gap that let a removed/moved tag keep reading).

E2E: Runtime.Tests FocasNativeAlarmEndToEndTests drives the real driver through the real
DriverHostActor and asserts the condition goes Active then inactive.

Claude-Session: https://claude.ai/code/session_01Ef2ozxS7QPanGT8uoATbTe

tests/Server/ZB.MOM.WW.OtOpcUa.AdminUI.Tests/Uns/FocasTagConfigModelTests.cs

@@ -80,6 +80,10 @@ public sealed class FocasTagConfigModelTests
     [InlineData("PARAM:1815/0")]
     [InlineData("MACRO:500")]
     [InlineData("FIXED:Identity/SeriesNumber")]
+    [InlineData("ALARM:*")]
+    [InlineData("ALARM:OTHER")]
+    [InlineData("ALARM:Servo/401-453")]
+    [InlineData("ALARM:T9")]
     public void Validate_returns_null_for_every_address_form_the_driver_accepts(string address)
         => new FocasTagConfigModel { Address = address }.Validate().ShouldBeNull();
 
@@ -104,6 +108,25 @@ public sealed class FocasTagConfigModelTests
         // The operator has to be able to act on it, so the message names the legal forms.
         error.ShouldContain("PARAM:");
         error.ShouldContain("FIXED:");
+        error.ShouldContain("ALARM:");
+    }
+
+    /// <summary>
+    ///     Gitea #647 — a malformed ALARM: selector gets the selector's own reason, the same text the deploy-time
+    ///     inspector gives for the same string (one authority: <c>FocasAddress.DescribeAlarmAddressError</c>).
+    /// </summary>
+    [Theory]
+    [InlineData("ALARM:Servo/10-5")]
+    [InlineData("ALARM:Bogus")]
+    [InlineData("ALARM:")]
+    public void Validate_rejects_a_malformed_alarm_selector_with_the_gate_s_reason(string address)
+    {
+        var error = new FocasTagConfigModel { Address = address }.Validate();
+
+        error.ShouldNotBeNull();
+        error.ShouldContain(FocasAddress.DescribeAlarmAddressError(address)!);
+        FocasTagDefinitionFactory.Inspect("{\"address\":\"" + address + "\",\"alarm\":{}}")
+            .ShouldContain(w => w.Contains(FocasAddress.DescribeAlarmAddressError(address)!));
     }
 
     [Fact]