applog-pull P0: category vs categoryValue + missing tenant-gate on shared DBs

SHIPPED ccf8147 v1.12.53. Leg 1: hardcoded SELECT category broke @enamel/@terra (categoryValue on shared DB) — 100% failure since first fire, masked by 4 green single-tenant apps. Leg 2 (found verifying leg 1, not in original brief): pull.ts had zero appKey refs — TERRA-3 tenant filter never ported, would have caused cross-tenant misattributed digests once leg 1 fixed the crash. Both fixed one push (shared import, splitting breaks it). Verified 6/6 instances restarted, correct per-app classification, enamel/terra differential controlled (enamel 0 / terra 10, appKey=terra).