Bump Temper sparse page planning

[rita-aga]

Summary

• Roll TemperPaw from Temper 041a096a6d48d4e0c2649d4a1e33471f72b7b9d5 to acc080368ee107d2905ae8d645a50361e1e74d94, carrying Temper PR [codex] Bump Temper authz candidate index #271 sparse pushed-down OData page planning.
• Update root Temper crate pins, Docker TEMPER_OBSERVABILITY_REV, Datadog observability contract expectations, guest temper-wasm-sdk manifests, and tracked nested WASM lockfiles.
• Keep this as a dependency/rollout PR only; source architecture is recorded in Temper ADR-0117 and PR [codex] Bump Temper authz candidate index #271.

Local validation

• stale old-revision scan with rg --no-ignore
• cargo fmt --all -- --check
• git diff --check
• cargo check --locked -p temperpaw
• cargo test --locked -p temperpaw --test datadog_observability_contract -- --nocapture (32/32 after repairing stale nested lockfiles)
• cargo clippy --locked -p temperpaw --all-targets -- -D warnings
• cargo test --locked -p temperpaw
• ./os-apps/paw-agent/wasm/build.sh (existing non-fatal sandbox_provisioner and monty_repl warnings only)

Rollout gates after merge

• PR CI
• main CI and Docker publish
• Railway deploy exact sha image
• live SessionEntries filtered/order/top after batch
• Datadog after proof comparing against sha-698ef85 baseline