test(localdb): deregister preserves data + partial-flip fails loudly (review round)

Review round on 3e62f161. Two coverage gaps and three wording/comment nits.

IMPORTANT 1 — deregistration is now proven DATA-PRESERVING. The self-heal test
inserted a deployment_pointer row and rebooted unconfigured but never looked at
the row again, so a library regression that touched base-table data during
cleanup would have gone unnoticed — on the very tables that ARE the
boot-from-cache backstop, and on the default-OFF nodes least likely to notice.
The new DisablingReplication_PrunesBookkeepingButNeverTouchesTheCachedDataItself
asserts the row's CONTENT survives (not just its count — a count passes against
a cleanup that blanks columns) while __localdb_row_version and __localdb_oplog,
the bookkeeping deregistration does own, go to zero.

IMPORTANT 2 — mid-loop partial failure is documented and pinned. Both loops flip
four tables with no try/catch, so a throw on the third leaves two flipped and
propagates out of the AddZbLocalDb singleton factory, failing host start. That
is correct — a node that came up anyway would be silently capturing on an
arbitrary subset — and both library calls are idempotent, so the retried boot
completes the flip. Written into OnReady's remarks and pinned by
AFailureMidwayThroughRegistration_FailsBootLoudly_AndTheRetriedBootConverges,
which drives OnReady through a delegating ILocalDb that throws on the Nth
RegisterReplicated, asserts the throw propagates, asserts the wrapper actually
reached that call, then re-runs OnReady unwrapped and asserts all four converge.

MINOR 3 — the Boot helper now records that OnReady's null-logger fallback lands
on Serilog's static Log.Logger, which this assembly never assigns; assertions
about logging pass an explicit logger.
MINOR 5 — log wording: "are both unset" -> "are both absent — unset or blank",
matching IsNullOrWhiteSpace.
MINOR 4 — LocalDbDeploymentArtifactCacheTests said its setup "mirrors
LocalDbSetup.OnReady"; it reproduces the two tables only and registers them
unconditionally without baselining. Softened to say so and to name the
divergence as intentional and inert there.

Falsified both new pins. Wrapper set to failOnCall: 99 (never throws) => the
partial-flip pin is the SOLE failure, so it genuinely exercises the Nth-call
throw path rather than some incidental exception. Predicate forced constant-true
=> five pins red including the new data-preservation one. Both mutations
reverted.

LocalDbSetupTests 15/15. Host.IntegrationTests 226 passed / 0 failed / 5
skipped. Runtime.Tests LocalDbDeploymentArtifactCacheTests 12/12.

src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSetup.cs

@@ -67,6 +67,14 @@ public static class LocalDbSetup
     ///         precisely the node that has no peer to capture for.
     ///     </para>
     ///     <para>
+    ///         <b>A failure part-way through either loop fails host start, and that is deliberate.</b>
+    ///         Neither branch catches, so a throw on the third of four tables leaves two flipped and
+    ///         propagates out of the <c>AddZbLocalDb</c> singleton factory — a node that came up
+    ///         anyway would be capturing (or not) on an arbitrary subset, which is silently partial
+    ///         replication with nothing in the log to say so. Both library calls are idempotent, so
+    ///         the retried boot simply completes the flip rather than compounding it.
+    ///     </para>
+    ///     <para>
     ///         The alarm buffer's tables are created unconditionally, regardless of whether this
     ///         node has <c>AlarmHistorian:Enabled</c> set, and regardless of replication. Creating
     ///         one lazily when the sink first appears would mean a node that enables the historian
@@ -229,7 +237,8 @@ public static class LocalDbSetup
         {
             logger.Information(
                 "LocalDb: removed stale change-capture from {TableCount} table(s) — this node has no "
-                + "replication configured ({PeerAddressKey}/{ApiKeyKey} are both unset), so the capture "
+                + "replication configured ({PeerAddressKey}/{ApiKeyKey} are both absent — unset or blank), "
+                + "so the capture "
                 + "triggers an earlier build installed have been dropped and their oplog/row-version "
                 + "rows pruned.",
                 cleaned,