Support template fake-compile in hosted security validation

[quasarea]

Summary

• add compile-only UE shim projects and fake-compile tooling so hosted validation can build both templates and Examples
• fix the Flexible Explorer template sources so they compile cleanly against the shim surface
• repair the hosted security-validation lane for multi-checkout execution, Coverity capture, and Coverity artifact publishing
• ignore generated pmllib/ output so local PML template builds do not dirty the branch
• align the GitHub test workflow in this branch to run on main
• document the hosted validation and fake-compile lessons in the repo's existing Copilot agent and README so future prompts can stay shorter

Key Changes

• add a new scripts/Invoke-FakeUECompile.ps1 entry point that builds shim assemblies, sets UNIFIED_ENGINEERING_REFERENCE_PATH, and compiles selected directories against the fake UE surface
• extend scripts/Build-AddIns.ps1 with -SkipPostBuildEvent and -Rebuild support so hosted fake-compile and Polaris capture can run deterministically without deployment-style side effects
• add compile-only shim projects and source stubs under shims/ for the API surface needed by template and example projects, including Flexible Explorer, database, geometry, utilities, GridControl, PML, Newtonsoft.Json, and WebView2
• update azure-pipelines.yml to add the hosted security-validation lane, use the explicit self-checkout path in the multi-checkout job, run the Polaris-wrapped fake compile with -Rebuild, and publish .blackduck from the correct repo-local path
• update the Flexible Explorer template sources to add the missing Aveva.Core.Presentation import and fully qualify Aveva.Core.FlexibleExplorer.FlexibleExplorer
• add pmllib/ to .gitignore
• adjust .github/workflows/test.yml in this branch so push and PR triggers target main
• update .github/agents/ue-customization-manager.agent.md and README.md with hosted validation, shim, fake-compile, and pmllib/ guidance for future agent sessions

Validation

• Technology pipeline build 7673048 succeeded with EnableSecurityValidation=true
• local fake compile validated for templates and Examples
• local rebuild-mode fake compile revalidated that compiler activity is emitted on the Polaris capture path

Notes

• the hosted security lane in azure-pipelines.yml now gets through fake compile, Coverity capture, and artifact publishing end to end
• the previous draft was incomplete because it did not mention the shim/template scope or the .github/workflows/test.yml change that is also part of this branch

[quasarea]

🎯 PR Readiness

Status	Draft PR with review-ready validation updates
Score	8.0/10 → 8.0/10
Penalties	None
Recommendation	Ready for normal review using pipeline evidence as the source of truth.

🚫 Disqualifiers

None.

📊 Scorecard

Category	Weight	Score	Weighted
Scope	2	2.0/2	2.0
Validation Path	3	2.0/3	2.0
Risk	3	2.0/3	2.0
Review Status	2	2.0/2	2.0

✅ Validation Snapshot

• Hosted validation lane updates were reviewed against azure-pipelines.yml and supporting scripts.
• PR Support template fake-compile in hosted security validation #20 is open, draft, and mergeable on GitHub.
• The remaining gap is confidence depth, not a blocking defect: shim-based fake compile is compile-surface validation rather than full UE runtime fidelity.

---

📝 This comment was rendered through the shared PR readiness template and posted through the GitHub-specific publisher.