fix(showcase-harness): repair three pre-existing probe failures post-Slice 3

- qa probe: manifest.yaml path corrected from showcase/packages/ to
  showcase/integrations/ (Slice 3 moved files; probe code and test
  fixture still referenced the old path).
- pin-drift probe: fail-baseline.json ENOENT in container — the 5-level
  import.meta.url walk-up from dist/probes/drivers/ overshoots /app and
  lands at /. Added PIN_DRIFT_REPO_ROOT=/app env var and COPY of the
  baseline file into the runtime stage.
- aimock-wiring probe: showcase-ms-agent-harness-dotnet (deployed: false)
  was not in the EXCLUDE_SERVICES set, causing it to be flagged as
  unwired. Added to the exclude list in both aimock-wiring.ts and
  smoke.yml.

Author: jpr5

showcase/harness/Dockerfile

@@ -68,6 +68,10 @@ ENV NODE_ENV=production
 # qa probe: repo-root override so the walk-up from dist/probes/drivers/
 # (3 levels to /app) matches the showcase/integrations/ layout copied above.
 ENV QA_REPO_ROOT=/app
+# pin-drift probe: same walk-up issue — the compiled driver lives at
+# dist/probes/drivers/pin-drift.js, five `..` segments overshoot /app
+# and land at /. Override so the driver finds showcase/scripts/fail-baseline.json.
+ENV PIN_DRIFT_REPO_ROOT=/app
 # Playwright cache lives outside /home/node so `chown` below doesn't
 # have to recurse over the ~300MB chromium tree on every build. Setting
 # PLAYWRIGHT_BROWSERS_PATH at this stage pins the install target; the
@@ -97,6 +101,10 @@ RUN node ./node_modules/playwright/cli.js install --with-deps chromium \
 # keep the image lean until another probe config actually needs those trees.
 COPY --from=build /repo/pnpm-workspace.yaml ./pnpm-workspace.yaml
 COPY --from=build /repo/packages ./packages
+# pin-drift probe: the driver reads showcase/scripts/fail-baseline.json as
+# the ratchet baseline. Only the JSON file is needed — the full scripts/
+# tree stays out of the runtime image.
+COPY --from=build /repo/showcase/scripts/fail-baseline.json ./showcase/scripts/fail-baseline.json
 # qa probe: the driver reads showcase/integrations/<slug>/manifest.yaml to
 # check QA file coverage. Copy only the manifests (not full source) to
 # keep the runtime image lean. The qa/ subdirectories are also needed

showcase/harness/config/probes/smoke.yml

@@ -73,6 +73,9 @@ discovery:
       - "showcase-shell-dashboard"
       - "showcase-shell-docs"
       - "showcase-shell-dojo"
+      # Harness service for .NET integration testing — not a demo service,
+      # deployed: false in manifest, no aimock wiring yet.
+      - "showcase-ms-agent-harness-dotnet"
       # Decommissioned starters — Railway services stopped, deployments
       # halted (PR #4390). Excluded so probes don't scan dead endpoints.
       - "showcase-starter-ag2"

showcase/harness/src/probes/aimock-wiring.ts

@@ -60,6 +60,7 @@ const EXCLUDE_SERVICES: ReadonlySet<string> = new Set([
   "showcase-shell-dojo",
   "showcase-pocketbase",
   "showcase-harness",
+  "showcase-ms-agent-harness-dotnet",
   "showcase-starter-ag2",
   "showcase-starter-agno",
   "showcase-starter-claude-sdk-python",

showcase/harness/src/probes/drivers/qa.test.ts

@@ -63,7 +63,7 @@ interface FixtureOpts {
  */
 function makeRepoFixture(opts: FixtureOpts): string {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), "qa-driver-"));
-  const pkgDir = path.join(root, "showcase", "packages", opts.slug);
+  const pkgDir = path.join(root, "showcase", "integrations", opts.slug);
   fs.mkdirSync(pkgDir, { recursive: true });
   const manifestBody =
     opts.manifestBody ??

showcase/harness/src/probes/drivers/qa.ts

@@ -94,7 +94,7 @@ export function createQaDriver(
       const slug = deriveSlug(input);
       const repoRoot = deps.repoRoot ?? resolveRepoRoot(ctx);
 
-      const pkgDir = path.join(repoRoot, "showcase", "packages", slug);
+      const pkgDir = path.join(repoRoot, "showcase", "integrations", slug);
       const manifestPath = path.join(pkgDir, "manifest.yaml");
 
       let manifestRaw: string;