Provision NemoClaw telemetry collection and reporting

## Parent epic

- #9540

## Outcome

Provision and approve the service needed for NemoClaw telemetry. Production telemetry remains disabled until this issue is complete.

## Requirements

- Provide a NemoClaw client ID and fixed UAT and production endpoints.
- Register `nemoclaw_install_completed` with only `operation: install | update`.
- Reject unknown fields and values.
- Approve data retention, access, deletion, transport metadata, country reporting, and abuse controls.
- Provide a server-side kill switch and aggregate reporting.

## Acceptance criteria

- [ ] Owners, client ID, endpoints, schema, and wire format are documented.
- [ ] Privacy and data-handling rules are approved.
- [ ] UAT accepts valid events and rejects invalid events.
- [ ] Failures never affect NemoClaw installation success.
- [ ] The kill switch and aggregate reporting work.
- [ ] Production activation is separately approved.

## Dependencies

- Design authority: #10435
- Initial client: #10440
- Later event schemas remain owned by #10442, #10447, #10448, and #10445.