fix(opcua): migrate OPC UA server to Opc.Ua SDK 1.5.378 (resolves startup TypeLoadException)

Opc.Ua.Server was pinned 1.5.374.126 while Client/Configuration were 1.5.378.106, so the
published Host unified Opc.Ua.Core to 1.5.378 (which dropped Opc.Ua.INodeIdFactory that Server
1.5.374 referenced). Every driver-role node (and the fused site nodes) failed to start the OPC
UA server with TypeLoadException, leaving the OPC data plane dead and the site UIs at 503.

Align all OPC UA packages to 1.5.378.106 (bump Server; drop the Opc.Ua.Configuration/Client
VersionOverrides in OpcUaServer + its integration tests) and port the server host to the
1.5.378 async API:
- ApplicationInstance requires an ITelemetryContext ctor (DefaultTelemetry.Create)
- Start/Stop/LoadApplicationConfiguration/Validate -> async; CheckApplicationInstanceCertificate
  -> CheckApplicationInstanceCertificatesAsync
- ImpersonateEventHandler is now (ISession, ImpersonateEventArgs)
- UserNameIdentityToken.DecryptedPassword is now byte[] (UTF-8 decode)
- tests ported (byte[] passwords; async discovery/session/read client API)

Verified: full solution builds, OpcUaServer unit tests 52/52, and in docker-dev all six OPC
endpoints (4840-4845) listen and the site UIs return 302 (were 503). End-to-end OPC behaviour
(read/write/subscribe/security under 1.5.378) still needs a functional client test.

src/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer/OpcUaApplicationHost.cs

@@ -1,3 +1,4 @@
+using System.Text;
 using Microsoft.Extensions.Logging;
 using Opc.Ua;
 using Opc.Ua.Configuration;
@@ -125,7 +126,10 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
     public async Task StartAsync(StandardServer server, CancellationToken cancellationToken)
     {
         _server = server;
-        _application = new ApplicationInstance
+        // 1.5.378 requires an ITelemetryContext on the ApplicationInstance ctor (the parameterless ctor
+        // is obsolete). DefaultTelemetry.Create wires the SDK's internal logging; an empty builder keeps
+        // the SDK's trace off our ILogger (the host keeps its own _logger) — sufficient for the bootstrap.
+        _application = new ApplicationInstance(DefaultTelemetry.Create(_ => { }))
         {
             ApplicationName = _options.ApplicationName,
             ApplicationType = ApplicationType.Server,
@@ -134,7 +138,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
 
         _ = await BuildConfigurationAsync(cancellationToken);
         await EnsureApplicationCertificateAsync(cancellationToken).ConfigureAwait(false);
-        await _application.Start(server).ConfigureAwait(false);
+        await _application.StartAsync(server).ConfigureAwait(false);
 
         AttachUserAuthenticator();
         PopulateServerArray();
@@ -223,7 +227,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
         }
     }
 
-    private void OnImpersonateUser(Session session, ImpersonateEventArgs args) =>
+    private void OnImpersonateUser(ISession session, ImpersonateEventArgs args) =>
         HandleImpersonation(_userAuthenticator, args, _logger);
 
     /// <summary>
@@ -248,7 +252,10 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
         string password;
         try
         {
-            password = token.DecryptedPassword ?? string.Empty;
+            // 1.5.378 exposes DecryptedPassword as raw bytes (was string); UserName token passwords
+            // are UTF-8 on the wire.
+            var decryptedBytes = token.DecryptedPassword;
+            password = decryptedBytes is null ? string.Empty : Encoding.UTF8.GetString(decryptedBytes);
         }
         catch (Exception ex)
         {
@@ -299,8 +306,8 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
     {
         // silent: false → SDK logs cert creation events through its own trace plumbing.
         // minimumKeySize/lifetimeInMonths: 0 → use SDK defaults (2048-bit, 12-month lifetime).
-        var ok = await _application!.CheckApplicationInstanceCertificate(
-            silent: false, minimumKeySize: 0, lifeTimeInMonths: 0, ct: cancellationToken).ConfigureAwait(false);
+        var ok = await _application!.CheckApplicationInstanceCertificatesAsync(
+            false, null, cancellationToken).ConfigureAwait(false);
         if (!ok)
         {
             throw new InvalidOperationException(
@@ -313,7 +320,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
     {
         if (!string.IsNullOrWhiteSpace(_options.ApplicationConfigPath))
         {
-            return await _application!.LoadApplicationConfiguration(_options.ApplicationConfigPath, silent: true);
+            return await _application!.LoadApplicationConfigurationAsync(_options.ApplicationConfigPath, true, ct);
         }
 
         var serverConfig = new ServerConfiguration
@@ -358,7 +365,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
             TraceConfiguration = new TraceConfiguration(),
         };
 
-        await config.Validate(ApplicationType.Server).ConfigureAwait(false);
+        await config.ValidateAsync(ApplicationType.Server, ct).ConfigureAwait(false);
         _application!.ApplicationConfiguration = config;
         return config;
     }
@@ -430,7 +437,7 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
     }
 
     /// <summary>Disposes the application host and cleans up resources.</summary>
-    public ValueTask DisposeAsync()
+    public async ValueTask DisposeAsync()
     {
         if (_impersonateHandler is not null && _server?.CurrentInstance?.SessionManager is { } sessionManager)
         {
@@ -439,8 +446,11 @@ public sealed class OpcUaApplicationHost : IAsyncDisposable
         }
         _impersonateHandler = null;
 
-        try { _application?.Stop(); }
-        catch (Exception ex) { _logger.LogWarning(ex, "OpcUaApplicationHost: Stop threw on dispose"); }
-        return ValueTask.CompletedTask;
+        if (_application is not null)
+        {
+            // 1.5.378: ApplicationInstance.Stop() → StopAsync().
+            try { await _application.StopAsync().ConfigureAwait(false); }
+            catch (Exception ex) { _logger.LogWarning(ex, "OpcUaApplicationHost: Stop threw on dispose"); }
+        }
     }
 }

src/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer/ZB.MOM.WW.OtOpcUa.OpcUaServer.csproj

@@ -7,11 +7,12 @@
 
     <ItemGroup>
         <PackageReference Include="OPCFoundation.NetStandard.Opc.Ua.Server"/>
-        <!-- Pin Opc.Ua.Configuration to 1.5.374.126 so the transitive Opc.Ua.Core matches what
-             Opc.Ua.Server is built against. The central pin (1.5.378.106) is required by
-             Driver.OpcUaClient; mixing transitive Opc.Ua.Core breaks CustomNodeManager2 overrides.
-             Bumps to 1.5.378.106 when Opc.Ua.Server publishes a matching release. -->
-        <PackageReference Include="OPCFoundation.NetStandard.Opc.Ua.Configuration" VersionOverride="1.5.374.126"/>
+        <!-- All OPC UA packages aligned at the central 1.5.378.106 (Opc.Ua.Server 1.5.378.106 is now
+             published). The prior VersionOverride pinned Opc.Ua.Configuration/Core to 1.5.374.126 to match
+             the older Server, but the published Host unified Core to 378 anyway (Driver.OpcUaClient needs
+             it) → Server 1.5.374 loaded against Core 1.5.378 and threw TypeLoadException(INodeIdFactory).
+             The 1.5.378 SDK is a sync→async + ITelemetryContext break, ported in OpcUaApplicationHost. -->
+        <PackageReference Include="OPCFoundation.NetStandard.Opc.Ua.Configuration"/>
     </ItemGroup>
 
     <ItemGroup>