cloud

Closed: CLOUD-4, CLOUD-6

Alert evaluation now runs immediately and every 60 seconds over completed minute buckets, persists restart-safe targets and deduplicated firings under PostgreSQL RLS, and isolates target failures. A pinned OpenTelemetry Collector now accepts authenticated OTLP/gRPC on :4317, preserves per-request authorization metadata through batching, forwards uncompressed OTLP/JSON, and stores a queryable five-span Frauthy lifecycle trace. The parser groups standard multi-resourceSpans envelopes and accepts OTLP/JSON int64 strings. Local Compose evidence and Cloud CI run 29459113423 cover the bridge; no UI or deployment paths changed.