Expose bounded workflow type dashboard totals

[rmcdaniel]

Supports waterline#141. Merged and released as Server 2.5.4.

• Add the authenticated, namespace-scoped workflow-type dashboard route. Workflow volume uses the selected types, while worker, queue and storage metrics retain their separately declared namespace scope.
• Identify retained primary failure events with opaque history cursors. Missing or pruned evidence and additional failures are explicit.
• Embed published Workflow 2.4.4 and publish matching Helm chart 0.1.141. Existing history cursors and complete-audit endpoints remain compatible.

Source: cf578b8b9f480873cbeb9e0d8c70e283f5c4bb0b. All PR and merged-source checks pass.

Release verification passes both registries/architectures, first-run readiness, source-free Compose, protocol catalog, rolling aliases and a clean Helm install. Exact image index:

sha256:f0b100f3be9a461c10f3cee99a530f72a8afaaf0ded4bd542edb4c570108d68e

A fresh published PHP SDK 2.2.2 consumer passes 28 HTTP checks without source overrides. These include maintenance-heavy filtered counts, namespace isolation, authentication refusal and a real worker failure whose opaque cursor opens its primary history event.

Published lifecycle qualification passes all 12 cells with no findings. Exact tuple: Server 2.5.4, Workflow 2.4.4, PHP SDK 2.2.2, Python SDK 2.4.0, Rust SDK 3.2.0, CLI 2.2.0 and Waterline 2.1.0.

The merged branch and completed test resources are removed. Waterline #141 remains open for its remaining detail-read, parity and published installation acceptance.