feat(query): require BackendPlan warm routes

[zzylol]

Summary

• ask ASAPPlanner for the post-ASAP summary tree at query time
• choose observed family/parameters only from warm-routed BackendPlan materializations
• require every maintained summary leaf to have an exact metric/family/parameter warm route
• fail closed to archive when an installed plan does not authorize warm execution

Validation

• cargo test -p data_plane query_engines::asap_query_engine --lib (89 passed)
• git diff --check

Stack

Depends on #462.