feat(event-subscriber): project a status-set as INGESCHREVEN via hoofdObject (refs #75)

Bind the NRC hoofdObject, recognise a zaken/status/create notification, and key the
projection on the zaak (hoofdObject) so the status updates the existing INGEDIEND row
to INGESCHREVEN — without reading OpenZaak (§8.1). Retain the ZGW resource in the log
(new column + migration) so a rebuild reproduces the approved status. Updates the
acceptance fakes for the new IAclClient/IZaakGateway members.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

services/projection-api/Projection.ReadModel/ProjectionDbContext.cs

@@ -35,6 +35,7 @@ public sealed class ProjectionDbContext(DbContextOptions<ProjectionDbContext> op
             e.Property(r => r.Key).HasColumnName("key");
             e.Property(r => r.Actie).HasColumnName("actie").IsRequired();
             e.Property(r => r.ZaakId).HasColumnName("zaak_id").IsRequired();
+            e.Property(r => r.Resource).HasColumnName("resource").IsRequired();
             e.Property(r => r.ReceivedAt).HasColumnName("received_at");
         });
     }
@@ -55,5 +56,10 @@ public sealed class ProcessedNotificationRow
     public required string Key { get; set; }
     public required string Actie { get; set; }
     public required string ZaakId { get; set; }
+
+    /// <summary>The ZGW resource (e.g. <c>zaak</c> or <c>status</c>) — retained so a rebuild reprojects
+    /// the right status without reading OpenZaak (S-09b).</summary>
+    public required string Resource { get; set; }
+
     public DateTimeOffset ReceivedAt { get; set; }
 }