feat(iios): tenant-scoped /v1/dlq REST + chaos endpoint + smoke (P9 slice 5)

GET /v1/dlq lists the caller tenant's dead-letters; POST /v1/dlq/:id/replay
fences by assertOwns (KG-02) + audits each replay. Dev-only POST
/v1/dev/chaos/poison + ChaosConsumer (fails first delivery, succeeds on
replay) drive smoke-dlq.mjs: poison → QUARANTINED → cross-tenant denied →
owner replay → RESOLVED. Adds dev.chaos.v1 contract event.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/iios-service/src/outbox/outbox.module.ts

@@ -2,9 +2,12 @@ import { Module } from '@nestjs/common';
 import { OutboxBus } from './outbox.bus';
 import { OutboxRelay } from './outbox.relay';
 import { DlqService } from './dlq.service';
+import { DlqController } from './dlq.controller';
+import { ChaosConsumer } from './chaos.consumer';
 
 @Module({
-  providers: [OutboxBus, OutboxRelay, DlqService],
+  controllers: [DlqController],
+  providers: [OutboxBus, OutboxRelay, DlqService, ChaosConsumer],
   exports: [OutboxBus, OutboxRelay, DlqService],
 })
 export class OutboxModule {}