Add configurable non-transparent OPC UA server redundancy

Separates ApplicationUri from namespace identity so each instance in a
redundant pair has a unique server URI while sharing the same Galaxy
namespace. Exposes RedundancySupport, ServerUriArray, and dynamic
ServiceLevel through the standard OPC UA server object. ServiceLevel
is computed from role (Primary/Secondary) and runtime health (MXAccess
and DB connectivity). Adds CLI redundancy command, second deployed
service instance, and 31 new tests including paired-server integration.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

service_info.md

@@ -46,6 +46,49 @@ Observed results:
 - `read ns=1;s=MESReceiver_001.MoveInPartNumbers`: succeeded with good status `0x00000000`.
 - `read ns=1;s=MESReceiver_001.MoveInPartNumbers[]`: failed with `BadNodeIdUnknown` (`0x80340000`).
 
+---
+
+## Instance 2 (Redundant Secondary)
+
+Deployed: `2026-03-28`
+
+Deployment path: `C:\publish\lmxopcua\instance2`
+
+Configuration:
+- `OpcUa.Port`: `4841`
+- `OpcUa.ServerName`: `LmxOpcUa2`
+- `OpcUa.ApplicationUri`: `urn:localhost:LmxOpcUa:instance2`
+- `Dashboard.Port`: `8082`
+- `MxAccess.ClientName`: `LmxOpcUa2`
+- `Redundancy.Enabled`: `true`
+- `Redundancy.Mode`: `Warm`
+- `Redundancy.Role`: `Secondary`
+- `Redundancy.ServerUris`: `["urn:localhost:LmxOpcUa:instance1", "urn:localhost:LmxOpcUa:instance2"]`
+
+Windows service:
+- Name: `LmxOpcUa2`
+- Display name: `LMX OPC UA Server (Instance 2)`
+- Account: `LocalSystem`
+- Endpoint: `opc.tcp://localhost:4841/LmxOpcUa`
+
+Instance 1 redundancy update (same date):
+- `OpcUa.ApplicationUri`: `urn:localhost:LmxOpcUa:instance1`
+- `Redundancy.Enabled`: `true`
+- `Redundancy.Mode`: `Warm`
+- `Redundancy.Role`: `Primary`
+- `Redundancy.ServerUris`: `["urn:localhost:LmxOpcUa:instance1", "urn:localhost:LmxOpcUa:instance2"]`
+
+CLI verification:
+```
+opcuacli-dotnet.exe redundancy -u opc.tcp://localhost:4840/LmxOpcUa
+  → Redundancy Mode: Warm, Service Level: 200, Application URI: urn:localhost:LmxOpcUa:instance1
+
+opcuacli-dotnet.exe redundancy -u opc.tcp://localhost:4841/LmxOpcUa
+  → Redundancy Mode: Warm, Service Level: 150, Application URI: urn:localhost:LmxOpcUa:instance2
+```
+
+Both instances report the same `ServerUriArray` and expose the same Galaxy namespace (`urn:ZB:LmxOpcUa`).
+
 ## Notes
 
 The service deployment and restart succeeded. The live CLI checks confirm the endpoint is reachable and that the array node identifier has changed to the bracketless form. The array value on the live service still prints as blank even though the status is good, so if this environment should have populated `MoveInPartNumbers`, the runtime data path still needs follow-up investigation.