W29 — v0.4 Kafka Connect and ksqlDB read views

[ammarheidari]

Objective

Implement optional bounded ecosystem read adapters.

Deliverables

• one optional Connect profile per Kafka cluster,
• worker/connectors/tasks/status projections,
• connector secret-field redaction,
• one optional ksqlDB profile per Kafka cluster,
• metadata-only ksqlDB discovery,
• SSRF/redirect/response-size/deadline protections,
• fixture integration tests,
• no mutation or arbitrary SQL execution.

Depends on W25 stable contracts and may run parallel to W26/W28.

Central tracker: #100
Scope authority: #99 / RFC-0004.

[ammarheidari]

W29 was admitted through PR #112 at cad15514156095433dda980cb2c39cbd8f55e84c with fail-closed connector config projection, trace redaction, separate Connect/ksqlDB bulkheads, and no statement/query execution.