Surface run repair-needed age on dw system:operator-metrics

Adds the `runs.oldest_repair_needed_at` and `runs.max_repair_needed_age_ms`
keys on the cli's operator-metrics output schema and renders the worst-case
stuck-workflow age rows on `dw system:operator-metrics`.

The two keys are the canonical stuck-workflow duplicate-risk age indicator
paired with the `durable_resume_paths` health check; their absence from the
`--json` contract previously narrowed what HTTP-only fleet operators could
read from the metric alone.

`OperatorMetricsCommand::renderRuns()` emits "Oldest repair-needed age:" and
"Oldest repair-needed at:" rows directly under the existing
`Repair needed:` count when the snapshot reports them, omitting both rows
gracefully when the snapshot predates the contract. `schemas/output/operator-metrics.schema.json`
pins `runs.oldest_repair_needed_at` (`["string","null"]`) and
`runs.max_repair_needed_age_ms` (`["integer","null"]`).

New tests:
- `test_operator_metrics_schema_pins_runs_repair_needed_age_keys`
- `test_operator_metrics_command_omits_runs_repair_needed_age_when_snapshot_predates_contract`
- render-smoke assertions for the two new rows in
`test_operator_metrics_command_renders_rollout_safety_signals`

Full `SystemCommandTest` 46/46 green; full cli suite 548/548 green.
Public Boundary scan exit 0.

Author: durable-workflow-ops

schemas/output/operator-metrics.schema.json

@@ -14,6 +14,8 @@
           "type": "object",
           "properties": {
             "repair_needed": { "type": ["integer", "null"] },
+            "oldest_repair_needed_at": { "type": ["string", "null"] },
+            "max_repair_needed_age_ms": { "type": ["integer", "null"] },
             "claim_failed": { "type": ["integer", "null"] },
             "compatibility_blocked": { "type": ["integer", "null"] },
             "waiting": { "type": ["integer", "null"] },

src/Commands/SystemCommand/OperatorMetricsCommand.php

@@ -98,6 +98,15 @@ private function renderRuns(OutputInterface $output, array $runs): void
     {
         $output->writeln('<info>Runs</info>');
         $output->writeln(sprintf('  Repair needed:        %d', (int) ($runs['repair_needed'] ?? 0)));
+        if (array_key_exists('max_repair_needed_age_ms', $runs)) {
+            $output->writeln(sprintf(
+                '  Oldest repair-needed age: %d ms',
+                (int) ($runs['max_repair_needed_age_ms'] ?? 0),
+            ));
+        }
+        if (is_string($runs['oldest_repair_needed_at'] ?? null)) {
+            $output->writeln(sprintf('  Oldest repair-needed at:  %s', $runs['oldest_repair_needed_at']));
+        }
         $output->writeln(sprintf('  Claim failed:         %d', (int) ($runs['claim_failed'] ?? 0)));
         $output->writeln(sprintf('  Compatibility blocked: %d', (int) ($runs['compatibility_blocked'] ?? 0)));
         if (array_key_exists('waiting', $runs)) {

tests/Commands/SystemCommandTest.php

@@ -505,6 +505,8 @@ public function test_operator_metrics_command_renders_rollout_safety_signals():
 
         self::assertStringContainsString('Runs', $display);
         self::assertStringContainsString('Repair needed:        4', $display);
+        self::assertStringContainsString('Oldest repair-needed age: 375000 ms', $display);
+        self::assertStringContainsString('Oldest repair-needed at:  2026-04-24T11:23:45Z', $display);
         self::assertStringContainsString('Claim failed:         2', $display);
         self::assertStringContainsString('Compatibility blocked: 1', $display);
         self::assertStringContainsString('Waiting (durable resume): 6', $display);
@@ -759,6 +761,42 @@ public function test_operator_metrics_schema_pins_run_wait_age_keys(): void
         self::assertSame(['integer', 'null'], $runs['max_wait_age_ms']['type']);
     }
 
+    public function test_operator_metrics_schema_pins_runs_repair_needed_age_keys(): void
+    {
+        $schema = json_decode(
+            (string) file_get_contents(__DIR__.'/../../schemas/output/operator-metrics.schema.json'),
+            true,
+            flags: JSON_THROW_ON_ERROR,
+        );
+
+        $runs = $schema['properties']['operator_metrics']['properties']['runs']['properties'];
+
+        self::assertSame(['integer', 'null'], $runs['repair_needed']['type']);
+        self::assertSame(['string', 'null'], $runs['oldest_repair_needed_at']['type']);
+        self::assertSame(['integer', 'null'], $runs['max_repair_needed_age_ms']['type']);
+    }
+
+    public function test_operator_metrics_command_omits_runs_repair_needed_age_when_snapshot_predates_contract(): void
+    {
+        $payload = self::operatorMetricsPayload();
+        unset(
+            $payload['operator_metrics']['runs']['oldest_repair_needed_at'],
+            $payload['operator_metrics']['runs']['max_repair_needed_age_ms'],
+        );
+
+        $command = new OperatorMetricsCommand();
+        $command->setServerClient(new SystemFakeClient($payload));
+
+        $tester = new CommandTester($command);
+        self::assertSame(Command::SUCCESS, $tester->execute([]));
+
+        $display = $tester->getDisplay();
+
+        self::assertStringNotContainsString('Oldest repair-needed age', $display);
+        self::assertStringNotContainsString('Oldest repair-needed at', $display);
+        self::assertStringContainsString('Repair needed:        4', $display);
+    }
+
     public function test_operator_metrics_schema_pins_matching_role_keys(): void
     {
         $schema = json_decode(
@@ -1038,6 +1076,8 @@ private static function operatorMetricsPayload(): array
                 'generated_at' => '2026-04-24T11:30:00Z',
                 'runs' => [
                     'repair_needed' => 4,
+                    'oldest_repair_needed_at' => '2026-04-24T11:23:45Z',
+                    'max_repair_needed_age_ms' => 375000,
                     'claim_failed' => 2,
                     'compatibility_blocked' => 1,
                     'waiting' => 6,