docs(index): OtOpcUa gates reads/browse/subscribe too — the previous entry said the opposite
#520 stage 6 (master 2026-08-01, live-gated). With Security:Acl:Enabled ON, every data-plane operation needs a matching NodeAcl grant, not just writes / alarm acks / HistoryRead. The stage-5 entry told ScadaBridge that a read-only consumer was 'unaffected either way' — that now holds only while the flag is off, which is the default. Also records the two stage-6 behaviours a consumer would otherwise discover the hard way: a deep Browse grant makes its ancestor folders browsable (so it exposes their names), and revoking a grant stops a live subscription — one BadUserAccessDenied then silence, resuming by itself if the grant returns, with no reconnect needed.
This commit is contained in: