fix(umdf): encode administrative halt/resume with official SecurityStatus_3 semantics (#583)

[pedrosakuma]

Summary

• replace proprietary halt/resume securityTradingEvent bytes with the official UMDF enum values and force halted instruments to publish FORBIDDEN
• publish the current SecurityStatus_3 state on snapshot/recovery using the current per-security RptSeq watermark without advancing incremental sequencing
• extend wire/core tests to pin halt, resume, and recovery semantics

Acceptance criteria

• halt publishes securityTradingStatus=FORBIDDEN with securityTradingEvent=SECURITY_STATUS_CHANGE
• resume publishes the restored phase with securityTradingEvent=SECURITY_REJOINS_SECURITY_GROUP_STATUS
• no out-of-domain securityTradingEvent bytes are emitted
• snapshot/recovery publishes current SecurityStatus_3, including FORBIDDEN while halted
• per-security RptSeq and snapshot packet sequencing invariants remain intact
• vendored schema bindings and files under schemas/ remain unchanged

Validation

• dotnet build SbeB3Exchange.slnx
• dotnet test tests/B3.Umdf.WireEncoder.Tests/B3.Umdf.WireEncoder.Tests.csproj
• dotnet test tests/B3.Exchange.Core.Tests/B3.Exchange.Core.Tests.csproj
• dotnet test tests/B3.Exchange.Matching.Tests/B3.Exchange.Matching.Tests.csproj
• git diff --stat -- schemas/

Closes #583