Fix #4602: Query<T>() throws IndexOutOfRangeException on tenant-mapped projection documents

[RorySan]

Fix #4602: Query<T>() throws IndexOutOfRangeException on tenant-mapped projection documents

Fixes #4602.

A LINQ Query<T>() threw IndexOutOfRangeException: "Ordinal must be between 0 and 1" when a
document both mapped tenant_id onto a member (via ITenanted or
.Metadata(m => m.TenantId.MapTo(...))) and was a projection/aggregate target (numeric
revisions enabled by ProjectionDocumentPolicy, with no revision member). LoadAsync<T> was
unaffected — only the LINQ path broke.

Cause

The closed-shape descriptor builds one ReadBinders array shared by all four storage styles.
RevisionColumn.ShouldSelect (and VersionColumn.ShouldSelect) return false for the QueryOnly
style when the column has no member:

public bool ShouldSelect(DocumentMapping mapping, StorageStyle storageStyle)
{
    if (Member != null) return true;
    return storageStyle != StorageStyle.QueryOnly && mapping.UseNumericRevisions;
}

So QueryOnly's SELECT omits mt_version, but the shared ReadBinders still contained the
version/revision binder (it was added whenever UseNumericRevisions, matching the non-QueryOnly
shape). ClosedShapeQueryOnlySelector.ApplyMetadata walks ReadBinders assigning ordinals in
lockstep, so every binder after the absent mt_version was off by one — the tenant binder then read
one column past the end of the QueryOnly row:

System.IndexOutOfRangeException: Ordinal must be between 0 and 1
   at Npgsql.NpgsqlDataReader.IsDBNull(Int32 ordinal)
   at Marten.Internal.ClosedShape.DocumentTenantIdBinder`1.Apply(...)
   at Marten.Internal.ClosedShape.ClosedShapeQueryOnlySelector`2.ApplyMetadata(...)

LoadAsync uses the lightweight/identity-map styles, whose SELECT does include mt_version, so it
stayed in lockstep — which is why only the LINQ path broke.

Fix

Give the descriptor a QueryOnlyReadBinders array that drops the version/revision binder when it's
present only for the non-QueryOnly concurrency rule (i.e. no member), and have
ClosedShapeQueryOnlySelector read from it. It's the same array instance as ReadBinders when
nothing is dropped, so there's no extra allocation for the common case. The non-QueryOnly selectors
(lightweight, identity-map, dirty-tracking) keep using ReadBinders and are unchanged.

Tests

src/EventSourcingTests/Bugs/Bug_4602_query_tenant_mapped_projection_document.cs:

Test	Tenant-mapped	Projection	Revision member	Before	After
can_query_an_ITenanted_projection_document	✓	✓	✗	throws	✅
can_query_a_MapTo_projection_document	✓	✓	✗	throws	✅
workaround_IRevisioned_member_realigns_the_select	✓	✓	✓	✅	✅
control_tenant_mapped_but_not_a_projection_target	✓	✗	—	✅	✅
control_projection_target_but_not_tenant_mapped	✗	✓	✗	✅	✅

Verified the two repro tests fail on master (same IndexOutOfRangeException) and pass with the fix.
Also re-ran the closed-shape numeric-revision / optimistic-concurrency tests
(CoreTests/Storage/Identification/closed_shape_*) and the DocumentDbTests concurrency + version
metadata suites (91 tests) — all green.

Standalone repro: https://github.com/RorySan/marten9-tenant-repro