Bring CI governance and Avalonia test hosts in line with the new DX path

Two independent CI regressions remained after the CLI DX work landed.
First, the automation and NuGet smoke lanes were loading mixed
Avalonia prerelease lines, which broke headless startup and desktop
smoke host initialization. Second, the TypeScript governance target
still enforced the pre-DX bridge client policy even though the repo had
already moved to the new `createBridgeClient` / `./client` bridge entry
pattern.

This change aligns the affected Avalonia package lines on rc1 for the
automation host path and updates the TypeScript governance rule to
accept the current shipped bridge client architecture.

Constraint: Keep the DX implementation and governance policy consistent; CI should validate the architecture we intentionally ship, not an obsolete one
Constraint: Limit the Avalonia package fix to the proven mismatched packages instead of broad unrelated dependency churn
Rejected: Revert the new bridge client entry pattern | that would undo the intended DX simplification rather than fixing the stale governance rule
Rejected: Patch over headless startup in test code only | the reproduced failure came from package-line skew, not from fixture logic itself
Confidence: high
Scope-risk: moderate
Reversibility: clean
Directive: When bridge client architecture changes, update both runtime/tests and Build.Governance.TypeScript.cs in the same change set
Directive: Keep Avalonia desktop/headless package lines aligned with the core Avalonia line in test hosts to avoid startup type-load failures
Tested: `dotnet test tests/Agibuild.Fulora.Integration.Tests.Automation/Agibuild.Fulora.Integration.Tests.Automation.csproj --configuration Release -v minimal` (209 passed)
Tested: `dotnet run --project tests/Agibuild.Fulora.Integration.NugetPackageTests/Agibuild.Fulora.Integration.NugetPackageTests.csproj --configuration Release --no-restore -- --smoke-test` (all 7 smoke steps passed)
Tested: `./build.sh --target TypeScriptDeclarationGovernance` (succeeded)
Tested: `dotnet test tests/Agibuild.Fulora.UnitTests/Agibuild.Fulora.UnitTests.csproj --configuration Release -v minimal` (2177 passed)
Not-tested: Fresh GitHub Actions status for this governance/package-alignment follow-up until remote CI completes
Related: 9b63067

Author: Hongwei-MB

build/Build.Governance.TypeScript.cs

@@ -41,7 +41,6 @@ internal partial class BuildTask
         "window.agWebView",
         ".rpc.invoke(",
         "bridgeClient.getService",
-        "createBridgeClient(",
         "EnableSpaHosting(",
         "BootstrapSpaAsync(",
         "WebView.NavigateAsync("
@@ -192,15 +191,19 @@ void AddSemanticViolation(string artifactPath, string expected, string actual)
 
                         if (relativePath.EndsWith("/bridge/client.ts", StringComparison.Ordinal))
                         {
-                            if (!source.Contains("@agibuild/bridge/profile", StringComparison.Ordinal))
-                                AddSemanticViolation(relativePath, "import from '@agibuild/bridge/profile'", "profile import missing");
-                            if (!source.Contains("createBridgeProfile", StringComparison.Ordinal))
-                                AddSemanticViolation(relativePath, "use createBridgeProfile", "createBridgeProfile missing");
+                            if (!(source.Contains("@agibuild/bridge/profile", StringComparison.Ordinal)
+                                  || source.Contains("@agibuild/bridge", StringComparison.Ordinal)))
+                                AddSemanticViolation(relativePath, "import from '@agibuild/bridge/profile' or '@agibuild/bridge'", "bridge runtime import missing");
+                            if (!(source.Contains("createBridgeProfile", StringComparison.Ordinal)
+                                  || source.Contains("createBridgeClient", StringComparison.Ordinal)))
+                                AddSemanticViolation(relativePath, "use createBridgeProfile or createBridgeClient", "bridge client bootstrap missing");
                         }
                         else if (relativePath.EndsWith("/bridge/services.ts", StringComparison.Ordinal))
                         {
-                            if (!source.Contains("generated/bridge.client", StringComparison.Ordinal))
-                                AddSemanticViolation(relativePath, "re-export generated bridge client contracts", "generated contract import missing");
+                            if (!(source.Contains("generated/bridge.client", StringComparison.Ordinal)
+                                  || source.Contains("from './client'", StringComparison.Ordinal)
+                                  || source.Contains("from \"./client\"", StringComparison.Ordinal)))
+                                AddSemanticViolation(relativePath, "re-export generated bridge client contracts directly or through './client'", "generated contract import missing");
                         }
                         else if (relativePath.EndsWith("useBridge.ts", StringComparison.Ordinal))
                         {