feat(alarms): exact OPC UA severity + per-condition quality on native alarm events (#626)

AlarmEventArgs gains optional OpcUaSeverity (supersedes the four-bucket mapping, clamped
1..1000) and QualityStatusCode (projected onto the condition's Quality). An Unspecified-kind
event carrying a quality is a quality-only annotation: the host updates the condition but
publishes no alerts row. Both default null, so every existing native source is unchanged.

Claude-Session: https://claude.ai/code/session_01Ef2ozxS7QPanGT8uoATbTe

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/Drivers/DriverHostActor.cs

@@ -1811,8 +1811,11 @@ public sealed class DriverHostActor : ReceiveActor, IWithTimers, IWithUnboundedS
             _opcUaPublishActor.Tell(new ZB.MOM.WW.OtOpcUa.Runtime.OpcUa.OpcUaPublishActor.AlarmStateUpdate(
                 nodeId, snapshot, msg.Args.SourceTimestampUtc, n.Realm));
 
-            // Only the Primary publishes the cluster-wide alerts transition (see the gate above).
-            if (!serviceAlertsAsPrimary) continue;
+            // Only the Primary publishes the cluster-wide alerts transition (see the gate above). A quality-only
+            // annotation (#626: e.g. an MTConnect condition gone Unavailable while already Normal) is not an
+            // alarm transition at all — the condition write above carries it; an alerts row would read as
+            // "Activated" for something that never activated.
+            if (!serviceAlertsAsPrimary || msg.Args.IsQualityOnly) continue;
 
             var meta = _alarmMetaByNodeId.TryGetValue(nodeId, out var m)
                 ? m : (EquipmentId: nodeId, Name: nodeId, AlarmType: "AlarmCondition", HistorizeToAveva: (bool?)null,

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/Drivers/NativeAlarmProjector.cs

@@ -21,7 +21,8 @@ public sealed class NativeAlarmProjector
     public AlarmConditionSnapshot Project(string nodeId, AlarmEventArgs e)
     {
         var prev = _prior.TryGetValue(nodeId, out var p) ? p : (Active: false, Acked: true);
-        var sev = MapSeverity(e.Severity);
+        // #626: a source with a finer scale than the four buckets supplies the exact Part 9 severity.
+        var sev = e.OpcUaSeverity is { } exact ? (ushort)Math.Clamp(exact, 1, 1000) : MapSeverity(e.Severity);
         var (active, acked) = e.Kind switch
         {
             AlarmTransitionKind.Raise or AlarmTransitionKind.Retrigger => (true, false),
@@ -32,7 +33,11 @@ public sealed class NativeAlarmProjector
         _prior[nodeId] = (active, acked);
         return new AlarmConditionSnapshot(
             Active: active, Acknowledged: acked, Confirmed: true, Enabled: true,
-            Shelving: AlarmShelvingKind.Unshelved, Severity: sev, Message: e.Message);
+            Shelving: AlarmShelvingKind.Unshelved, Severity: sev, Message: e.Message,
+            // #626: a per-condition source quality (MTConnect Unavailable) when the driver reports one. Absent
+            // (every pre-#626 source) ⇒ Good, as before — driver-wide comms loss stays the host's
+            // out-of-band WriteAlarmQuality annotation (#477), not something the projector infers.
+            StatusCode: e.QualityStatusCode ?? OpcUaStatus.Good);
     }
 
     /// <summary>Clears all tracked per-node state (call on address-space rebuild).</summary>