fix(alarms): #647 review — Raise on an active condition is a re-statement; FOCAS outage quality + health

MAJOR-1: a deploy that changes a driver's config respawns it, and the fresh instance's empty told
record re-sent Raise for every still-active alarm, un-acking acknowledged conditions and writing a
duplicate "Activated" alerts row. NativeAlarmProjector now treats Raise on an already-active
condition as a re-statement (keeps Acked; ForwardNativeAlarm skips the alerts row); only Retrigger
(or inactive->active) un-acks. Sources whose upstream ack state is authoritative send Retrigger for
an unacked re-statement: OpcUaClient on first sight (no prior told), Galaxy for an unacked active
snapshot entry. Runtime E2E drives a FRESH FOCAS driver after a redeploy and asserts the ack survives.

MAJOR-2: a failed FOCAS alarm read annotates each subscribed condition BadNoCommunication once per
outage (#626 quality-only path) with one Warning (MINOR-6), lifted to Good on recovery; failed alarm
reads degrade driver health with LastSuccessfulRead frozen (successful ones advance it), so an
alarm-only driver trips the #527 comms-loss watchdog.

MINOR-3 CLAUDE.md #630 bullet; MINOR-4 split line; MINOR-5 a non-empty cnc_rdalmmsg2 payload that
fits neither stride throws; MINOR-7 value-tag + parsed-address tables are built and swapped, never
cleared in place under the retained poll engine. Docs corrected (FOCAS.md, AlarmTracking.md, CLAUDE.md).

Claude-Session: https://claude.ai/code/session_01Ef2ozxS7QPanGT8uoATbTe

tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.IntegrationTests/OpcUaClientDriverWireTests.cs

@@ -257,7 +257,7 @@ public sealed class OpcUaClientDriverWireTests
 
     /// <summary>
     ///     #619 — ConditionRefresh over the wire: a condition already active+unacked BEFORE the driver subscribes is
-    ///     reported (Raise, keyed by the RawPath) right after subscribe, not only on its next transition. A second
+    ///     reported (Retrigger since #647, keyed by the RawPath) right after subscribe, not only on its next transition. A second
     ///     subscribe of the same set refreshes again and must emit nothing (no re-raise); a positive control then
     ///     proves the feed is still live by acknowledging upstream and seeing exactly the Acknowledge arrive.
     /// </summary>
@@ -293,9 +293,11 @@ public sealed class OpcUaClientDriverWireTests
         AlarmEventArgs[] Seen() { lock (seen) return [.. seen]; }
 
         var first = await drv.SubscribeAlarmsAsync([AlarmRef], ct);
-        await RecordedEvents.WaitUntilAsync(() => Seen().Any(e => e.Kind == AlarmTransitionKind.Raise));
+        // First sight of an active+UNACKED upstream condition is a Retrigger (#647 review): the host keeps an ack
+        // across a Raise on an already-active condition, so only a Retrigger forces the upstream's unack.
+        await RecordedEvents.WaitUntilAsync(() => Seen().Any(e => e.Kind == AlarmTransitionKind.Retrigger));
 
-        var raise = Seen().Single(e => e.Kind == AlarmTransitionKind.Raise);
+        var raise = Seen().Single(e => e.Kind == AlarmTransitionKind.Retrigger);
         raise.ConditionId.ShouldBe(AlarmRef);
         raise.Message.ShouldBe("already hot");
         raise.OpcUaSeverity.ShouldBe(800);