feat(localdb): one-time alarm-historian.db migrator

Copies the pre-consolidation store-and-forward queue into the consolidated
database on first boot, then renames the legacy file aside. Rows are in that
file precisely because the historian could not be reached, so dropping them
on upgrade would discard exactly the alarm audit trail the queue exists to
protect.

Runs last in OnReady, after every RegisterReplicated call. It is the only
thing in OnReady that writes rows, and capture is trigger-based: a migration
that ran before registration would recover the backlog locally and never
replicate a line of it, silently and permanently.

Ids are derived from the payload rather than the plan's mig-{node}-{legacyId}
scheme. Node-prefixing solves the collision the legacy AUTOINCREMENT key
would cause -- node A's row 7 and node B's row 7 are different alarms -- but
it preserves a duplication that should be collapsed instead. A warm pair's
two legacy files OVERLAP: HistorianAdapterActor default-writes while its
redundancy role is unknown, so both nodes accepted the same transitions
during every boot window. Prefixed ids would carry those duplicates into the
merged buffer forever; equal-payload ids converge them. The same property
makes a crash between commit and rename harmless under INSERT OR IGNORE.

OnReady now takes IConfiguration rather than offering an overload that skips
the migration. A wiring mistake that silently discarded a node's undelivered
alarm history is not a mistake worth making possible.

The copy is restricted to the columns the legacy table actually has. Naming
a column an older build never wrote throws "no such column", which would
discard every row in the table rather than the one field.

Claude-Session: https://claude.ai/code/session_01GASWkNEi68FSCtvr6rLoEW

src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSetup.cs

@@ -1,3 +1,4 @@
+using Microsoft.Extensions.Configuration;
 using ZB.MOM.WW.LocalDb;
 using ZB.MOM.WW.OtOpcUa.Core.AlarmHistorian;
 using ZB.MOM.WW.OtOpcUa.Runtime.DeploymentCache;
@@ -27,8 +28,8 @@ public static class LocalDbSetup
     ///         <c>RegisterReplicated</c> is what installs the three AFTER triggers that capture
     ///         changes into the oplog. Any row written before that call is never captured, so it
     ///         never reaches the peer — silently, and permanently, because nothing ever revisits
-    ///         history. The Phase-2 legacy alarm migrator therefore runs <i>after</i> every
-    ///         registration, not alongside the DDL.
+    ///         history. <see cref="AlarmSfLegacyMigrator"/> therefore runs <b>last</b>, after every
+    ///         registration — it writes rows, and they must be captured like any other write.
     ///     </para>
     ///     <para>
     ///         The alarm buffer's tables are created unconditionally, regardless of whether this
@@ -39,9 +40,15 @@ public static class LocalDbSetup
     ///     </para>
     /// </remarks>
     /// <param name="db">The freshly constructed local database.</param>
-    public static void OnReady(ILocalDb db)
+    /// <param name="configuration">
+    ///     Application configuration, read by the legacy migrator for the pre-consolidation queue's
+    ///     path. Required rather than optional: an overload that silently skipped the migration
+    ///     would be one wiring mistake away from discarding a node's undelivered alarm history.
+    /// </param>
+    public static void OnReady(ILocalDb db, IConfiguration configuration)
     {
         ArgumentNullException.ThrowIfNull(db);
+        ArgumentNullException.ThrowIfNull(configuration);
 
         // CreateConnection() hands back an already-open, pragma-configured connection carrying the
         // zb_hlc_next() UDF the capture triggers need. Calling Open() on it would throw.
@@ -54,5 +61,8 @@ public static class LocalDbSetup
         db.RegisterReplicated(DeploymentCacheSchema.ArtifactsTable);
         db.RegisterReplicated(DeploymentCacheSchema.PointerTable);
         db.RegisterReplicated(AlarmSfSchema.EventsTable);
+
+        // LAST, and only here. This is the one call in OnReady that writes rows.
+        AlarmSfLegacyMigrator.Migrate(db, configuration);
     }
 }