fix(harness): make deploy E2E tests pass against real SQL (seed cluster FKs)

Integration-sweep follow-up #6 (SQL leg). The sweep flagged 7 heavy 2-node
deploy/failover/reconnect E2E tests as 'time out under amd64-emulated SQL' and
suggested raising deadlines. That diagnosis was WRONG: run against real
(native-amd64) SQL on the Docker host, they still hang — even at 4x deadline.
Root cause is that these tests had never actually run against real SQL, only the
EF in-memory provider, which does NOT enforce foreign keys.

Two distinct defects, both hidden by in-memory:

1. Missing FK-parent seed (5 tests). The deploy records a NodeDeploymentState row
   per node, FK'd to ClusterNode (FK_NodeDeploymentState_ClusterNode_NodeId). The
   tests never seeded ServerCluster + ClusterNode, so on SQL each node-state INSERT
   throws and the deploy never seals (waits the full deadline regardless of size).
   Added TwoNodeClusterHarness.SeedDefaultClusterAsync (seeds a ServerCluster +
   a ClusterNode per node; Warm/NodeCount=2 to satisfy the SQL CHECK constraint
   CK_ServerCluster_RedundancyMode_NodeCount AND the ClusterEnabledNodeCountMismatch
   validator). Called it in DeployHappyPath x2 / Failover / FleetDiagnostics /
   EquipmentNamespace; fixed DriverReconnect to seed node B + NodeCount=2.

2. Stale EquipmentId (EquipmentNamespace test; pre-existing on BOTH providers).
   Seeded EquipmentId='eq-1', but the later-added EquipmentIdNotDerived validator
   requires EquipmentId == DeriveEquipmentId(EquipmentUuid) ('EQ-'+first 12 hex).
   Fixed the seed to a canonical id + matching UUID. Only surfaced once the FK fix
   let the deploy reach equipment validation.

Also added OTOPCUA_HARNESS_SQL_HOST / OTOPCUA_HARNESS_LDAP_HOST overrides so the
harness fixtures can run on the native-amd64 Docker host (avoids arm64 mssql
emulation entirely).

Verified: the 5 SQL-backed classes go 11/11 green vs native SQL; in-memory default
unregressed (12/12). RoslynVirtualTagEvaluatorTests racing test is a pre-existing
flaky race (not SQL-backed; passes in isolation) — left as-is.

tests/Server/ZB.MOM.WW.OtOpcUa.Host.IntegrationTests/EquipmentNamespaceMaterializationTests.cs

@@ -7,6 +7,7 @@ using ZB.MOM.WW.OtOpcUa.Commons.Messages.Admin;
 using ZB.MOM.WW.OtOpcUa.Configuration;
 using ZB.MOM.WW.OtOpcUa.Configuration.Entities;
 using ZB.MOM.WW.OtOpcUa.Configuration.Enums;
+using ZB.MOM.WW.OtOpcUa.Configuration.Validation;
 using ZB.MOM.WW.OtOpcUa.Runtime.Drivers;
 
 namespace ZB.MOM.WW.OtOpcUa.Host.IntegrationTests;
@@ -28,19 +29,28 @@ public sealed class EquipmentNamespaceMaterializationTests
 {
     private static CancellationToken Ct => TestContext.Current.CancellationToken;
 
+    // Equipment.EquipmentId must equal DraftValidator.DeriveEquipmentId(EquipmentUuid) — the
+    // 'EquipmentIdNotDerived' rule (EquipmentId = 'EQ-' + first 12 hex of the UUID). A fixed UUID
+    // keeps the derived id stable for the assertions below.
+    private static readonly Guid EquipmentUuid = Guid.Parse("11111111-1111-1111-1111-111111111111");
+    private static readonly string EquipmentId = DraftValidator.DeriveEquipmentId(EquipmentUuid); // EQ-111111111111
+
     /// <summary>Verifies a deployed Equipment namespace carries its signal into the composed artifact.</summary>
     [Fact]
     public async Task Deploying_an_equipment_namespace_carries_the_signal_into_the_artifact()
     {
         await using var harness = await TwoNodeClusterHarness.StartAsync();
 
+        // Seed the parent ServerCluster + ClusterNode rows the SQL FKs require (the c1 config below
+        // FKs to ServerCluster; on the in-memory provider this is unnecessary — FKs aren't enforced).
+        await harness.SeedDefaultClusterAsync("c1");
         await SeedEquipmentNamespaceAsync(harness);
 
         await using var scope = harness.NodeA.Services.CreateAsyncScope();
         var client = scope.ServiceProvider.GetRequiredService<IAdminOperationsClient>();
 
         var result = await client.StartDeploymentAsync(createdBy: "alice@test", Ct);
-        result.Outcome.ShouldBe(StartDeploymentOutcome.Accepted);
+        result.Outcome.ShouldBe(StartDeploymentOutcome.Accepted, $"Deploy not accepted: {result.Message}");
         var deploymentId = result.DeploymentId!.Value.Value;
 
         // The artifact is composed + persisted at dispatch time; assert on it without waiting for
@@ -65,13 +75,13 @@ public sealed class EquipmentNamespaceMaterializationTests
         // ParseComposition extracted it as an EquipmentTag with FullName pulled from TagConfig.
         var tag = composition.EquipmentTags.ShouldHaveSingleItem();
         tag.TagId.ShouldBe("tag-speed");
-        tag.EquipmentId.ShouldBe("eq-1");
+        tag.EquipmentId.ShouldBe(EquipmentId);
         tag.Name.ShouldBe("Speed");
         tag.DataType.ShouldBe("Float");
         tag.FullName.ShouldBe("40001");
 
         // The equipment folder browses by its friendly UNS Name, not the MachineCode.
-        composition.EquipmentNodes.ShouldContain(e => e.EquipmentId == "eq-1" && e.DisplayName == "station-1");
+        composition.EquipmentNodes.ShouldContain(e => e.EquipmentId == EquipmentId && e.DisplayName == "station-1");
         composition.UnsAreas.ShouldContain(a => a.UnsAreaId == "nw-area-filling" && a.DisplayName == "filling");
         composition.UnsLines.ShouldContain(l => l.UnsLineId == "nw-line-1" && l.DisplayName == "line-1");
     }
@@ -95,12 +105,13 @@ public sealed class EquipmentNamespaceMaterializationTests
         db.UnsLines.Add(new UnsLine { UnsLineId = "nw-line-1", UnsAreaId = "nw-area-filling", Name = "line-1" });
         db.Equipment.Add(new Equipment
         {
-            EquipmentId = "eq-1", DriverInstanceId = "drv-modbus", UnsLineId = "nw-line-1",
+            EquipmentId = EquipmentId, EquipmentUuid = EquipmentUuid,
+            DriverInstanceId = "drv-modbus", UnsLineId = "nw-line-1",
             Name = "station-1", MachineCode = "STATION_001",
         });
         db.Tags.Add(new Tag
         {
-            TagId = "tag-speed", DriverInstanceId = "drv-modbus", EquipmentId = "eq-1",
+            TagId = "tag-speed", DriverInstanceId = "drv-modbus", EquipmentId = EquipmentId,
             Name = "Speed", DataType = "Float", AccessLevel = TagAccessLevel.Read,
             TagConfig = "{\"FullName\":\"40001\"}",
         });