fix(deploy): wire native-alarm-source capability validation into flattening pipeline (#22)

FlatteningPipeline loaded data connections but never passed the alarm-capable
connection set to SemanticValidator, so the native-alarm-source capability check
(built but inert) never ran — a source bound to a non-alarm-capable connection
deployed silently. Compute the capable set (IAlarmSubscribableConnection: OPC UA
+ MxGateway) and thread it through ValidationService to SemanticValidator.

src/ZB.MOM.WW.ScadaBridge.TemplateEngine/Validation/ValidationService.cs

@@ -45,8 +45,18 @@ public class ValidationService
     /// </summary>
     /// <param name="configuration">The flattened configuration to validate.</param>
     /// <param name="sharedScripts">Optional list of shared scripts for validation context.</param>
+    /// <param name="alarmCapableConnectionNames">
+    /// Optional set of site data-connection names whose protocol resolves to an
+    /// alarm-capable adapter (see
+    /// <see cref="Commons.Interfaces.Protocol.AlarmCapableProtocols"/>). When supplied,
+    /// the semantic validator gates every native-alarm-source binding against it.
+    /// <c>null</c> skips the capability check (its absence makes the check inert).
+    /// </param>
     /// <returns>A merged <see cref="ValidationResult"/> aggregating all pipeline stage outcomes.</returns>
-    public ValidationResult Validate(FlattenedConfiguration configuration, IReadOnlyList<ResolvedScript>? sharedScripts = null)
+    public ValidationResult Validate(
+        FlattenedConfiguration configuration,
+        IReadOnlyList<ResolvedScript>? sharedScripts = null,
+        IReadOnlySet<string>? alarmCapableConnectionNames = null)
     {
         ArgumentNullException.ThrowIfNull(configuration);
 
@@ -59,7 +69,7 @@ public class ValidationService
             ValidateScriptTriggerReferences(configuration),
             ValidateExpressionTriggers(configuration),
             ValidateConnectionBindingCompleteness(configuration),
-            _semanticValidator.Validate(configuration, sharedScripts)
+            _semanticValidator.Validate(configuration, sharedScripts, alarmCapableConnectionNames)
         };
 
         return ValidationResult.Merge(results.ToArray());