chore(deps): LocalDb 0.3.4 -> 0.3.7 (#889, scadaproj#53)

Pins ZB.MOM.WW.LocalDb and .Replication at 0.3.7 (published 2026-11-12).
Wire-compatible; no code change needed.

- 0.3.6 (scadaproj#36): the library sync service enforces
  LocalDb:Replication:ApiKey itself. LocalDbSyncAuthInterceptor is kept for
  its refuse-every-stream-when-blank rule; doc comment updated. docker-dev
  site-a pair: both nodes now read one variable,
  OTOPCUA_SITE_A_LOCALDB_SYNC_KEY (same dev default as before), so an
  override can never split the pair.
- 0.3.7 (scadaproj#16): a tombstone is held until the peer has it, so a
  node offline past TombstoneRetention no longer brings a pruned
  deployment back. The ledger grows while a peer is down; optional
  TombstoneHardCap (documented in Configuration.md) bounds it.

Runbook, Configuration.md and the cluster-topology rule updated.

Claude-Session: https://claude.ai/code/session_01GT67ACmpMR7b9LGRPLijMi

src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs

@@ -9,10 +9,12 @@ using ZB.MOM.WW.LocalDb.Replication;
 namespace ZB.MOM.WW.OtOpcUa.Host.Configuration;
 
 /// <summary>
-///     Gates the LocalDb passive sync endpoint. The replication library deliberately leaves inbound
-///     authentication to the host — its <c>LocalDbSyncService</c> verifies nothing — so without this
-///     interceptor anything that can reach a driver node's sync port could stream arbitrary rows
-///     into that node's deployment-artifact cache.
+///     Gates the LocalDb passive sync endpoint. Through LocalDb 0.3.5 the replication library left
+///     inbound authentication to the host — its <c>LocalDbSyncService</c> verified nothing — so
+///     without this interceptor anything that could reach a driver node's sync port could stream
+///     arbitrary rows into that node's deployment-artifact cache. Since 0.3.6 (scadaproj#36) the
+///     library checks the same key and header itself; this interceptor is kept for the one rule the
+///     library does not apply — refusing every stream when no key is configured.
 /// </summary>
 /// <remarks>
 ///     <para>