chore(deps): LocalDb 0.3.4 -> 0.3.7 (#889, scadaproj#53)

Pins ZB.MOM.WW.LocalDb and .Replication at 0.3.7 (published 2026-11-12).
Wire-compatible; no code change needed.

- 0.3.6 (scadaproj#36): the library sync service enforces
  LocalDb:Replication:ApiKey itself. LocalDbSyncAuthInterceptor is kept for
  its refuse-every-stream-when-blank rule; doc comment updated. docker-dev
  site-a pair: both nodes now read one variable,
  OTOPCUA_SITE_A_LOCALDB_SYNC_KEY (same dev default as before), so an
  override can never split the pair.
- 0.3.7 (scadaproj#16): a tombstone is held until the peer has it, so a
  node offline past TombstoneRetention no longer brings a pruned
  deployment back. The ledger grows while a peer is down; optional
  TombstoneHardCap (documented in Configuration.md) bounds it.

Runbook, Configuration.md and the cluster-topology rule updated.

Claude-Session: https://claude.ai/code/session_01GT67ACmpMR7b9LGRPLijMi

docker-dev/docker-compose.yml

@@ -729,7 +729,9 @@ services:
       # DEV-ONLY committed key (rig philosophy — like the SQL password + secrets KEK above). It
       # MUST be byte-identical on both nodes: the interceptor is fail-closed, so any mismatch
       # silently stops the pair converging. NEVER reuse this key outside this local dev rig.
-      LocalDb__Replication__ApiKey: "dev-site-a-localdb-sync-key"
+      # Both site-a nodes read the SAME variable, so an override can never split the pair; since
+      # LocalDb 0.3.6 the library's sync service checks this key too (scadaproj#36).
+      LocalDb__Replication__ApiKey: "${OTOPCUA_SITE_A_LOCALDB_SYNC_KEY:-dev-site-a-localdb-sync-key}"
       # Since LocalDb 0.2.0 the WIRE message is bounded by MaxBatchBytes (2 MB default, left
       # unset), not by this. MaxBatchSize is now the secondary row cap AND the DB read-page size,
       # and the read page is materialised in memory before the byte-budget split runs — so 16 is
@@ -838,7 +840,7 @@ services:
       ServerHistorian__UseTls: "false"
       LocalDb__Path: "/app/data/otopcua-localdb.db"
       LocalDb__SyncListenPort: "9001"
-      LocalDb__Replication__ApiKey: "dev-site-a-localdb-sync-key"
+      LocalDb__Replication__ApiKey: "${OTOPCUA_SITE_A_LOCALDB_SYNC_KEY:-dev-site-a-localdb-sync-key}"
       LocalDb__Replication__MaxBatchSize: "16"
     ports:
       - "4843:4840"