Reliable ingestion event delivery with multiple subscribers

When multiple viewers were subscribed to the same ingestion stream, replay via Last-Event-ID could miss or duplicate events. Each tenant channel now uses a single shared buffer so event IDs are stable across subscribers, and inserts plus notifications happen in one transaction so subscribers never see events for rolled-back rows.