feat(adminui): Reconnect/Restart on DriverStatusPanel (DriverOperator-gated)

- RestartDriver / ReconnectDriver messages + AdminOperationsActor
  handlers (broadcast via driver-control DPS topic; audited via
  ConfigEdits).
- DriverHostActor subscribes to driver-control; locates the
  matching child DriverInstanceActor and stops+respawns it
  (Restart) or sends it a ForceReconnect internal message
  (Reconnect — re-enters Reconnecting state without full stop).
  DriverInstanceSpec constructor call uses named args to handle
  the full 6-parameter signature.
- New DriverOperator authorization policy mapped to DriverOperator
  or FleetAdmin role; documented in docs/security.md. Map LDAP
  group via GroupToRole (e.g. "ot-driver-operator": "DriverOperator").
- DriverStatusPanel renders Reconnect + Restart buttons when the
  user holds the DriverOperator policy (hidden otherwise). Restart
  requires an in-page Razor confirm block (no JS confirm, keeps
  SignalR event loop unblocked). Both buttons show a spinner and
  are disabled during in-flight; result chip auto-clears after 8s.
  Username sourced from AuthenticationStateProvider.

Reconnect resolves to "ForceReconnect" (re-enter Reconnecting,
not full stop+respawn) — transport drops and retries while actor
and in-memory state are preserved. All DriverInstanceActor states
handle ForceReconnect safely (no-op when already in transition).

src/Server/ZB.MOM.WW.OtOpcUa.Runtime/Drivers/DriverInstanceActor.cs

@@ -44,6 +44,13 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
     public sealed record SubscriptionEstablished(string DiagnosticId, int ReferenceCount);
     public sealed record SubscriptionFailed(string Reason);
     public sealed record Unsubscribe;
+    /// <summary>
+    ///     Sent by <see cref="DriverHostActor"/> when the AdminUI issues a Reconnect operation.
+    ///     Pushes the actor out of <c>Connected</c> into <c>Reconnecting</c> so the transport is
+    ///     re-established without fully stopping and respawning the actor. Safe to send in any
+    ///     state — a no-op when already Reconnecting or Connecting.
+    /// </summary>
+    public sealed record ForceReconnect;
     /// <summary>Published to the actor's parent whenever the subscribed IDriver fires
     /// <see cref="ISubscribable.OnDataChange"/>. The parent forwards to OpcUaPublishActor.</summary>
     public sealed record AttributeValuePublished(string FullReference, object? Value, OpcUaQuality Quality, DateTime TimestampUtc);
@@ -178,6 +185,7 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
         Receive<ApplyDelta>(msg => Sender.Tell(new ApplyResult(true, "stubbed", msg.Correlation)));
         Receive<WriteAttribute>(_ => Sender.Tell(new WriteAttributeResult(true, "stubbed")));
         Receive<DisconnectObserved>(_ => { /* stubbed drivers don't disconnect */ });
+        Receive<ForceReconnect>(_ => { /* stubbed drivers don't reconnect */ });
         Receive<HealthPollTick>(_ => PublishHealthSnapshot());
     }
 
@@ -197,6 +205,7 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
             Become(Reconnecting);
             PublishHealthSnapshot();
         });
+        Receive<ForceReconnect>(_ => { /* already connecting — no-op */ });
         Receive<HealthPollTick>(_ => PublishHealthSnapshot());
     }
 
@@ -212,6 +221,13 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
             Become(Reconnecting);
             PublishHealthSnapshot();
         });
+        Receive<ForceReconnect>(_ =>
+        {
+            _log.Info("DriverInstance {Id}: ForceReconnect requested by admin; re-entering Reconnecting", _driverInstanceId);
+            DetachSubscription();
+            Become(Reconnecting);
+            PublishHealthSnapshot();
+        });
         ReceiveAsync<WriteAttribute>(HandleWriteAsync);
         ReceiveAsync<Subscribe>(HandleSubscribeAsync);
         ReceiveAsync<Unsubscribe>(_ => UnsubscribeAsync());
@@ -230,6 +246,7 @@ public sealed class DriverInstanceActor : ReceiveActor, IWithTimers
             PublishHealthSnapshot();
         });
         Receive<InitializeFailed>(_ => { /* keep retrying via timer */ });
+        Receive<ForceReconnect>(_ => { /* already reconnecting — no-op */ });
         Receive<HealthPollTick>(_ => PublishHealthSnapshot());
         Timers.StartPeriodicTimer("retry-connect", RetryConnect.Instance, _reconnectInterval);
     }