feat(web): orchestrator events read API + SSE stream

GET /api/v1/orchestrator/events — paginated list with optional
kind=traffic|file filter. GET /api/v1/orchestrator/events/stream —
SSE: snapshot on connect, live forward of orchestrator.> bus events
mapped to 'traffic' / 'file' SSE event names.

Repo gains list_orchestrator_events(limit, offset, kind?, since_ts?),
count_orchestrator_events(kind?), and prune_orchestrator_events
(per_dst_cap=10000) for periodic worker-side trimming.

decnet/web/db/models/__init__.py

@@ -55,6 +55,7 @@ from .health import (
 )
 from .orchestrator import (
     OrchestratorEvent,
+    OrchestratorEventsResponse,
 )
 from .logs import (
     Bounty,
@@ -186,6 +187,7 @@ __all__ = [
     "HealthResponse",
     # orchestrator
     "OrchestratorEvent",
+    "OrchestratorEventsResponse",
     # logs
     "Bounty",
     "BountyResponse",

decnet/web/db/models/orchestrator.py

@@ -5,9 +5,10 @@ cleanly separable from synthetic life-injection events at query time.
 The orchestrator worker is the sole writer.
 """
 from datetime import datetime, timezone
-from typing import Optional
+from typing import Any, List, Optional
 from uuid import uuid4
 
+from pydantic import BaseModel
 from sqlalchemy import Column, Index, Text
 from sqlmodel import Field, SQLModel
 
@@ -50,3 +51,10 @@ class OrchestratorEvent(SQLModel, table=True):
     payload: str = Field(
         sa_column=Column("payload", Text, nullable=False, default="{}")
     )
+
+
+class OrchestratorEventsResponse(BaseModel):
+    total: int
+    limit: int
+    offset: int
+    data: List[dict[str, Any]]