Auto: opcuaclient-11 — reverse connect (server-initiated)

Closes #283

scripts/e2e/test-opcuaclient.ps1

@@ -54,8 +54,29 @@
 .PARAMETER ChangeWaitSec
   How long the subscribe stage waits for a data-change. Default 10s.
 
+.PARAMETER ReverseConnect
+  When set, the script asserts the gateway is configured for reverse-connect
+  (server-initiated) mode. The OtOpcUa server's DriverConfig for the OpcUaClient
+  instance must already have ReverseConnect.Enabled=true + ListenerUrl set; this
+  script doesn't reconfigure the driver, only verifies the bridged path still
+  reads end-to-end with the listener up. The reverse-connect topology is opaque
+  to the downstream OPC UA client (us), so the read assertion is identical to
+  the dial-mode path — the value of running the script in this mode is to catch
+  regressions where reverse-connect breaks the post-init capability surface.
+
+.PARAMETER ReverseListenerUrl
+  Documentation-only. The listener URL the gateway is expected to be bound to
+  when -ReverseConnect is set; printed in the run banner so operators can
+  cross-check their server config. Default opc.tcp://0.0.0.0:4844.
+
 .EXAMPLE
   .\test-opcuaclient.ps1 -BridgedNodeId "ns=2;s=/warsaw/opc-plc/StepUp"
+
+.EXAMPLE
+  # OT-DMZ deployment: the upstream dials the gateway. The script flow is the
+  # same — we still drive the bridged read through the OtOpcUa server — but the
+  # banner reflects the reverse-connect topology.
+  .\test-opcuaclient.ps1 -BridgedNodeId "ns=2;s=/warsaw/opc-plc/StepUp" -ReverseConnect
 #>
 
 param(
@@ -63,7 +84,9 @@ param(
     [string]$UpstreamUrl = "opc.tcp://localhost:50000",
     [Parameter(Mandatory)] [string]$BridgedNodeId,
     [string]$UpstreamNodeId = "ns=3;s=StepUp",
-    [int]$ChangeWaitSec = 10
+    [int]$ChangeWaitSec = 10,
+    [switch]$ReverseConnect,
+    [string]$ReverseListenerUrl = "opc.tcp://0.0.0.0:4844"
 )
 
 $ErrorActionPreference = "Stop"
@@ -73,6 +96,11 @@ $opcUaCli = Get-CliInvocation `
     -ProjectFolder "src/ZB.MOM.WW.OtOpcUa.Client.CLI" `
     -ExeName "otopcua-cli"
 
+if ($ReverseConnect) {
+    Write-Host "[INFO] -ReverseConnect set: gateway is expected to be bound to listener $ReverseListenerUrl"
+    Write-Host "[INFO] Upstream OPC UA server should be configured with --rc=$ReverseListenerUrl (or equivalent on a real server)"
+}
+
 $results = @()
 
 # Stage 1: probe