transport: complete M0–M7

shared: add stream+consumer policy helpers; NATS context header builder

aggregate/runner/projection: centralize stream validation and header usage; set bounded consumer params

projection: add QueryService gRPC and wire into main; settings include PROJECTION_GRPC_ADDR

gateway: gRPC routing to Projection/Runner with deadlines; bounded read-only retries; pooled gRPC channels (bounded LRU+TTL); admin proxy forwards to gRPC; probes use concurrency limiter + TTL cache

runner: add RunnerAdmin gRPC server (drain, status, reload) and wire into main; settings include RUNNER_GRPC_ADDR

tests: add gateway authz for runner admin, projection tenant isolation, runner admin drain semantics

docs: update TRANSPORT_DEVELOPMENT_PLAN to reflect completed milestones and details

runner/tests/jetstream_integration.rs

@@ -44,9 +44,6 @@ fn jetstream_connects_and_can_publish_effect_result() {
             metadata: MessageMetadata::default(),
         };
 
-        runner_js
-            .publish_effect_result("tenant.t1.effect_result.noop.c1".to_string(), &result)
-            .await
-            .unwrap();
+        runner_js.publish_effect_result(&result).await.unwrap();
     });
 }