BM-3054: docs(ops-logs-query): point prover log groups at new boundless/hlc/prover groups

[willpote]

What

Updates the ops-logs-query skill to reflect the consolidated two-prover model that went live on 2026-06-08. Both provers now ship to a log group literally named boundless/hlc/prover (one per AWS account), with a single stream each.

AWS account	Log group	Stream	Role
prod ([aws.prod])	boundless/hlc/prover	prover-prod	prod / "release" — serves prod market; full broker logs
staging ([aws.staging])	boundless/hlc/prover	prover-staging	staging / "nightly" — serves staging + prod markets

Changes

• Replaced the stale /boundless/bento/prover-* table with the new boundless/hlc/prover model (account → stream → role).
• Documented the per-account message envelope difference (prod: bare {"message":...}; staging: wrapped {"host","identifier","unit",...}) and the jq parse idiom.
• Flagged the staging broker-log shipping gap: as of 2026-06-09 the prover-staging stream ships only bento_cli agent stdout under docker.service — broker module logs and kernel messages are not reaching CloudWatch. Treat absence-of-broker-logs on staging as a monitoring gap, not an idle broker.
• Moved the old groups (BPLatitudeRelease/Nightly, prover-01/02, testnet variants) to a "legacy / decommissioned" table (stopped shipping 2026-05-29).
• Updated the service-name pattern table and the "Checking for Recent Deployments" section.

Verification

• Confirmed prod prover-prod carries full broker logs and ~10k fulfillments / 24h.
• Confirmed staging prover-staging currently ships only bento_cli/docker.service (the documented gap).

🤖 Generated with Claude Code

[linear]

BM-3054