Native AOT: the hosted daemon, subscriptions, side effects, raw SQL and a second store (#430)

[jeremydmiller]

Closes #430. Stacked on #431 (Weasel 9.41), so it targets that branch. Retarget to main before #431 merges, or GitHub will close this PR. CI doesn't run on it until then.

Measured natively (macOS arm64, ILC 10.0.1)

smoke/aot-consumer/UnmeasuredPaths.cs runs each path in the native image, each on a store and file of its own:

• Hosted daemon (AddAsyncDaemon()), a subscription, a message and an event raised from RaiseSideEffects, and AdvancedSql / QueueSqlCommand: all worked with no change.
• AddFisherStore<T>(): failed. Its marker is a DispatchProxy, which emits a type at runtime (AssemblyBuilder.DefineDynamicAssembly → PlatformNotSupportedException). That's a .NET limitation, not something in Fisher.

The fix: a declared store class

New public API, AddFisherStore<T, TImplementation>():

public sealed class ArchiveStore(StoreOptions options) : DocumentStore(options), IArchiveStore;
services.AddFisherStore<IArchiveStore, ArchiveStore>(options => ...);

• DocumentStore already implements everything the marker inherits, so the class body is empty.
• Nothing downstream changed. Every consumer of the marker already unwrapped through SecondaryStoreProxy.Unwrap, which returns a non-proxy store as-is, and a declared class is an IEventStore and the document tooling interfaces.
• In a native image, the one-argument overload refuses by name, naming the class to declare and the overload to call. The native smoke asserts that refusal.
• Docs: compiled samples in native-aot.md and multiple-stores.md.

Verification

• Native publish and run pass, including the refusal step.
• multi_store_registration gains a JIT test for the declared store: isolation, StoreName, and the monitoring registrations resolving to the store itself.
• Full CI-shaped run green on net9.0 and net10.0: 2539 / 36 / 31. check_scoreboard.py agrees for both TFMs; leak check clean.

🤖 Generated with Claude Code