Merge develop into main: ProjectTemplate re-sync and tooling alignment

.editorconfig

@@ -47,52 +47,21 @@ end_of_line = lf
 [*.{cmd,bat,ps1}]
 end_of_line = crlf
 
+# --- .NET-only below: C# and ReSharper style. Everything above is the line-ending
+# governance every derived repo carries; a non-.NET repo may drop from here down. ---
+
 # C# files
 [*.cs]
 
 # Default to suggestion severity
 dotnet_analyzer_diagnostic.severity = suggestion
 
-# AnalysisMode=All (Directory.Build.props) enables every analyzer rule as a
-# build warning, overriding the bulk suggestion default above on a per-rule
-# basis; combined with TreatWarningsAsErrors that breaks the build on existing
-# brownfield code. Relax the specific rules below back to suggestion — each is
-# a deliberate, documented exception rather than a latent defect:
-#   CA1002  Public APIs intentionally expose List<T> (e.g. FileEx.EnumerateDirectory,
-#           StringHistory.StringList); changing to Collection<T> would break the
-#           published InsaneGenius.Utilities surface.
-#   CA1024  Download.GetUri is intentionally a method, not a property.
-#   CA1034  Unavoidable nested types generated by C# 14 `extension` members in
-#           Extensions.cs (the file already suppresses the related CA1708).
-#   CA1054  Download URL parameters are intentionally `string`, not `System.Uri`.
-#   CA1063  Existing IDisposable implementations are intentionally simple.
-#   CA1307  String operations rely on the default comparison; existing behavior
-#           is intentional and unchanged.
-#   CA1515  Library/console/test public types are intentionally public.
-#   CA1823  xUnit fixture fields are injected for lifetime/collection wiring and
-#           are not always referenced directly.
-#   CA1849  A few synchronous calls inside async paths are kept intentionally.
-#   CA2000  Stream/disposable ownership is frequently transferred (returned or
-#           stored), so scope-based disposal analysis reports false positives.
-#   CA2007  Library `await using` / `await foreach` disposal sites; the awaited
-#           async calls already use ConfigureAwait(false), and rewriting the
-#           using-declarations into ConfigureAwait blocks hurts readability.
-#   CA5394  Random is used for retry jitter / temp-name generation, not security.
-# (IL3058 — Serilog not AOT-annotated — is a compiler/linker-level warning with
+# Per-rule analyzer exceptions live in the owning project's `.editorconfig`
+# (Utilities/, UtilitiesTests/) at the narrowest scope that fits, each with its
+# own justification - see CODESTYLE.md "Analyzer Diagnostics and Suppressions".
+# (IL3058 - Serilog not AOT-annotated - is a compiler/linker-level warning with
 # no source location, so it can't be set here; it's handled via NoWarn in the
 # AOT project files instead.)
-dotnet_diagnostic.CA1002.severity = suggestion
-dotnet_diagnostic.CA1024.severity = suggestion
-dotnet_diagnostic.CA1034.severity = suggestion
-dotnet_diagnostic.CA1054.severity = suggestion
-dotnet_diagnostic.CA1063.severity = suggestion
-dotnet_diagnostic.CA1307.severity = suggestion
-dotnet_diagnostic.CA1515.severity = suggestion
-dotnet_diagnostic.CA1823.severity = suggestion
-dotnet_diagnostic.CA1849.severity = suggestion
-dotnet_diagnostic.CA2000.severity = suggestion
-dotnet_diagnostic.CA2007.severity = suggestion
-dotnet_diagnostic.CA5394.severity = suggestion
 
 csharp_indent_block_contents = true
 csharp_indent_braces = false