fix(health): route site heartbeats into the aggregator

CentralCommunicationActor.HandleHeartbeat was forwarding each incoming
HeartbeatMessage to Context.Parent, which resolves to the /user
guardian — a non-actor. Every site heartbeat went straight to dead
letters (~1026 per central node per 30 minutes at the default ~2s
interval across three sites).

The aggregator now exposes MarkHeartbeat(siteId, receivedAt) which
bumps LastReportReceivedAt on already-known sites (and clears IsOnline
if it had flipped) without touching LatestReport. Heartbeats from
unregistered sites are dropped — first registration still happens on
the first full report. CentralCommunicationActor calls this in place
of the no-op Tell.

The result: heartbeats now serve their stated health-monitoring
purpose (per CLAUDE.md) by keeping a site marked online between the
30s full reports if a single report is briefly delayed, and the dead
letter noise disappears entirely.

src/ScadaLink.Communication/Actors/CentralCommunicationActor.cs

@@ -100,8 +100,8 @@ public class CentralCommunicationActor : ReceiveActor
 
     private void HandleHeartbeat(HeartbeatMessage heartbeat)
     {
-        // Forward heartbeat to parent for any interested central actors
-        Context.Parent.Tell(heartbeat);
+        var aggregator = _serviceProvider.GetService<ICentralHealthAggregator>();
+        aggregator?.MarkHeartbeat(heartbeat.SiteId, heartbeat.Timestamp);
     }
 
     /// <summary>

src/ScadaLink.HealthMonitoring/CentralHealthAggregator.cs

@@ -76,6 +76,26 @@ public class CentralHealthAggregator : BackgroundService, ICentralHealthAggregat
             });
     }
 
+    /// <summary>
+    /// Bumps the last-seen timestamp for a site already known via a prior
+    /// SiteHealthReport. Heartbeats from sites we have not yet received a
+    /// full report from are ignored — registration only happens on report.
+    /// </summary>
+    public void MarkHeartbeat(string siteId, DateTimeOffset receivedAt)
+    {
+        if (!_siteStates.TryGetValue(siteId, out var state))
+            return;
+
+        if (receivedAt > state.LastReportReceivedAt)
+            state.LastReportReceivedAt = receivedAt;
+
+        if (!state.IsOnline)
+        {
+            state.IsOnline = true;
+            _logger.LogInformation("Site {SiteId} is back online (heartbeat)", siteId);
+        }
+    }
+
     /// <summary>
     /// Get the current health state for all known sites.
     /// </summary>

src/ScadaLink.HealthMonitoring/ICentralHealthAggregator.cs

@@ -9,6 +9,15 @@ namespace ScadaLink.HealthMonitoring;
 public interface ICentralHealthAggregator
 {
     void ProcessReport(SiteHealthReport report);
+
+    /// <summary>
+    /// Bumps the last-seen timestamp for a site already known via a prior
+    /// SiteHealthReport. Used to keep a site marked online between full
+    /// 30s reports when ~2s heartbeats are arriving — protects against the
+    /// 60s offline threshold firing on a transiently delayed report.
+    /// </summary>
+    void MarkHeartbeat(string siteId, DateTimeOffset receivedAt);
+
     IReadOnlyDictionary<string, SiteHealthState> GetAllSiteStates();
     SiteHealthState? GetSiteState(string siteId);
 }