MO-523: Align analytics event envelope

[tjpeel-ee]

Summary

• Align the published compliance-declaration analytics envelope with the EPR event-envelope interface.
• Preserve the existing transactional outbox and SNS publication path.

Implemented

• Map the persisted outbox insert operation to published create, retain update and delete, and emit UTC timestamps with millisecond precision.
• Populate correlationId from the propagated x-cdp-request-id trace value when present.
• Emit user:<UUID> actors for user submissions and status amendments, while retaining service:waste-obligations for the system-driven delete flow.
• Qualify schema versions as compliance_declaration_v<major>.<minor> and keep embedded-schema lookup compatible with previously stored dotted values.
• Validate the supported entity, operations, event types, actor prefixes, deletion reason, and schema versions before publication.
• Rename the deletion reason to elevated_system_allowed_removal and normalise undispatched legacy outbox records during publication.
• Document that the renamed deletion reason must be added to the shared governed schema vocabulary.
• Restore Sonar coverage reporting by passing coverage options to the Microsoft Testing Platform and writing both reports to the workspace root.

Scope Decisions

• Ignore PII classification, field protection, and piiKeyRef population under the agreed instruction; piiKeyRef remains null.
• Do Not Implement cdec_<ULID> entity IDs because the specification is incompatible with the service's immutable Mongo ObjectId model. Published IDs remain compliance_declaration_<ObjectId> until the specification is corrected.

Verification

• Pass Docker Compose image build and CSharpier gate.
• Pass dotnet build.
• Pass Api.Tests: 620 tests.
• Pass Api.IntegrationTests: 247 tests.
• Produce API and integration XML coverage reports with the corrected CI commands; the new analytics vocabulary and timestamp converter are fully covered.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
98.2% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud