review(Driver.S7.Cli): endpoint validation + cancellation/flush/write-lock consistency

Re-review at 7286d320. -008 (Medium): S7CommandBase.ValidateEndpoint (port range + timeout>0)
in all commands +tests. -009 clean OperationCanceledException handling; -010 FlushLogging()
in subscribe finally; -011 lock console writes in OnDataChange. -012 (Verdict headline) deferred.

src/Drivers/Cli/ZB.MOM.WW.OtOpcUa.Driver.S7.Cli/Commands/ProbeCommand.cs

@@ -27,6 +27,7 @@ public sealed class ProbeCommand : S7CommandBase
     public override async ValueTask ExecuteAsync(IConsole console)
     {
         ConfigureLogging();
+        ValidateEndpoint();
         var ct = console.RegisterCancellationHandler();
 
         var probeTag = new S7TagDefinition(
@@ -58,9 +59,12 @@ public sealed class ProbeCommand : S7CommandBase
             await console.Output.WriteLineAsync();
             await console.Output.WriteLineAsync(SnapshotFormatter.Format(Address, snapshot[0]));
         }
-        catch (OperationCanceledException)
+        catch (OperationCanceledException) when (ct.IsCancellationRequested)
         {
-            throw; // Ctrl+C — let CliFx handle it normally.
+            // Ctrl+C — re-throw so CliFx exits cleanly. The when filter ensures a
+            // driver-internal timeout (different CancellationToken) is not mis-classified
+            // as user cancellation and falls through to the structured-report catch below.
+            throw;
         }
         catch
         {