docs(audit): apply per-cluster judgment fixes across living docs

Resolve audit findings: correct WorkerEnvelope proto/route/metric/session
facts; rewrite auth (ZB.MOM.WW.Auth migration), dashboard (ZB.MOM.WW.Theme),
and StyleGuide (foreign-project copy-paste); document alarm subsystem, Ldap
options, and gateway alarm broker; fix client CLI flags and package paths.

docs/GatewayTesting.md

@@ -100,6 +100,17 @@ Optional live smoke variables:
 | `MXGATEWAY_LIVE_MXACCESS_WRITE_SECURED_USER` | `admin` | ArchestrA user name passed to `AuthenticateUser` before the `WriteSecured` parity step. |
 | `MXGATEWAY_LIVE_MXACCESS_WRITE_SECURED_PASSWORD` | `admin123` | Password paired with the user above. Never logged; the test asserts the value does not appear in the WriteSecured diagnostic message. |
 
+When `MXGATEWAY_LIVE_MXACCESS_WORKER_EXE` is unset, the integration harness
+locates the worker by resolving the repository root: `ResolveRepositoryRoot`
+walks parent directories from the test binary looking for a directory that
+contains a `src` subdirectory next to either a `.git` marker or a `*.sln` /
+`*.slnx` file under `src`. The `.git`-or-`.sln` pair lets the resolution work
+both in a checked-out repository and in an extracted copy that ships no `.git`
+folder. If the walk exhausts without a match, it throws `InvalidOperationException`
+naming the start directory and the expected markers; set
+`MXGATEWAY_LIVE_MXACCESS_WORKER_EXE` to point directly at a worker executable and
+bypass repository-root resolution entirely.
+
 The test output includes session id, worker process id, command status,
 HRESULT/status diagnostics, event sequence and handles, close status, and worker
 stdout/stderr lines emitted during the run.