fix(scripting): give scripted-alarm predicates the configured run budget, not 250 ms (lmxopcua#779)

DriverHostActor built ScriptedAlarmEngine without a scriptTimeout, so every
production alarm predicate fell back to TimedScriptEvaluator.DefaultTimeout
(250 ms) while virtual tags and Calculation tags ran on 2 s. History shows no
decision behind it: 250 ms is the generic Phase-7 A.4 default, the VT
evaluator moved to 2 s in F8b (219d10a2) and the alarm engine was simply never
given a value.

- New node-wide Scripting:RunTimeout (default 2 s, clamped to (0, 60 s],
  non-positive -> default, each clamp a startup Warning) on ScriptingOptions.
- The VT evaluator and the alarm engine default to it; DriverHostActor now
  builds the engine through CreateScriptedAlarmEngine, which passes it
  explicitly. Calculation keeps its per-driver runTimeoutMs.
- Docs: ScriptEditor (config table), ScriptedAlarms, VirtualTags.

Tests: ScriptedAlarmEngineBudgetTests (a 600 ms predicate now completes and
activates; default and configured budgets), ScriptedAlarmEngineBudgetWiringTests
(the host-built engine), ScriptingOptionsBindingTests (bind + clamps). The
engine and wiring tests fail with the old 250 ms default restored.

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV

src/Core/ZB.MOM.WW.OtOpcUa.Core.ScriptedAlarms/ScriptedAlarmEngine.cs

@@ -238,7 +238,10 @@ public sealed class ScriptedAlarmEngine : IDisposable
     /// <param name="loggerFactory">The factory for creating alarm loggers.</param>
     /// <param name="engineLogger">The logger for engine-level diagnostics.</param>
     /// <param name="clock">Optional function providing the current UTC time; defaults to DateTime.UtcNow.</param>
-    /// <param name="scriptTimeout">Optional timeout for script execution; defaults to the evaluator's default timeout.</param>
+    /// <param name="scriptTimeout">Optional per-predicate wall-clock budget; null ⇒ <see cref="ScriptingOptions.RunTimeout"/>
+    /// of <paramref name="scripting"/> (2 s by default — the same budget virtual tags get). lmxopcua#779: the null
+    /// default used to be <c>TimedScriptEvaluator.DefaultTimeout</c> (250 ms), which is what every production engine
+    /// silently ran with because the host never passed a value.</param>
     /// <param name="scripting">Run-guard budget + quarantine threshold; null ⇒ <see cref="ScriptingOptions"/> defaults.</param>
     public ScriptedAlarmEngine(
         ITagUpstreamSource upstream,
@@ -254,7 +257,7 @@ public sealed class ScriptedAlarmEngine : IDisposable
         _loggerFactory = loggerFactory ?? throw new ArgumentNullException(nameof(loggerFactory));
         _engineLogger = engineLogger ?? throw new ArgumentNullException(nameof(engineLogger));
         _clock = clock ?? (() => DateTime.UtcNow);
-        _scriptTimeout = scriptTimeout ?? TimedScriptEvaluator<AlarmPredicateContext, bool>.DefaultTimeout;
+        _scriptTimeout = scriptTimeout ?? (scripting ?? new ScriptingOptions()).Sanitized(out _).RunTimeout;
         _guard = new ScriptRunGuard(scripting, _engineLogger);
         _shutdownToken = _shutdownCts.Token;
     }
@@ -262,6 +265,9 @@ public sealed class ScriptedAlarmEngine : IDisposable
     /// <summary>The run guard every predicate evaluation goes through (diagnostics / tests).</summary>
     public ScriptRunGuard RunGuard => _guard;
 
+    /// <summary>The wall-clock budget each predicate run is given (diagnostics / tests).</summary>
+    public TimeSpan ScriptTimeout => _scriptTimeout;
+
     /// <summary>
     ///     OPC UA <c>BadInternalError</c> — the quality a condition is annotated with while its predicate
     ///     cannot be evaluated (timed out, refused because the previous run is still executing, or