Complete Phase 7 telemetry, analytics, and usage

[vaheed]

Summary

• stream bounded OpenResty and DNSdist telemetry through Vector into short-retention ClickHouse raw tables and longer-retention aggregates
• add policy-scoped domain/admin analytics, raw logs, Filament views, and idempotent PostgreSQL usage rollups with stable JSON/CSV exports
• add buffer/drop monitoring, outage/privacy/runbook documentation, and a real-runtime Phase 7 qualification covering 20,000 analytics domain IDs

Validation

• make dev-phase7-e2e
• full isolated PHPUnit: 139 tests, 1,108 assertions
• vendor/bin/pint --test
• Vector configuration validation
• Prometheus configuration/rule validation (4 rules)
• development and production-example Compose validation
• OpenAPI contract check
• documentation link check
• git diff --check main...HEAD

Operations

• applies 2026_07_20_000000_create_usage_rollups.php non-destructively
• ClickHouse initialization adds raw, hourly, daily, and materialized-view tables; existing persistent development storage was migrated without volume removal
• manual browser automation was not run; the exact owner-run Phase 7 checklist is in docs/manual-browser-qualification.md