修复Gitea仓库门禁依赖安装

- Repository checks 在运行 AGC AppSurface 前安装子包依赖

- 补充工作流依赖准备契约测试

.gitea/workflows/project-ci.yml

@@ -69,6 +69,9 @@ jobs:
       - name: Install npm dependencies
         run: bash scripts/ci-npm-ci-with-retry.sh
 
+      - name: Install AI game creator dependencies
+        run: bash scripts/ci-npm-ci-with-retry.sh --prefix apps/ai-game-creator-shell
+
       - name: Run repository checks
         run: npm run check:repository-ci
 

docs/project-memory/shared-memory/decision-log.md

@@ -14261,4 +14261,5 @@
 
 - 网络 transport 的原始错误（例如浏览器 `Load failed`、URL、底层连接文本）不得直接进入登录页；客户端按超时、拒绝连接、地址解析和 TLS/证书四类可操作原因归一化，其余情况使用统一服务不可达提示。
 - 本地 `master` 推送门禁 `scripts/check-repository-ci.sh` 必须在 lint 后运行 Jenkins Web Build 所覆盖的 AGC AppSurface 套件，再执行 build、content 和 diff 检查，避免登录 UI 回归只在远端构建阶段暴露；完整 Vitest 仍由 Jenkins 生产构建执行。
+- Gitea `repository-checks` 因此必须和 Frontend / Native jobs 一样先执行 AGC 子包的 lockfile 安装；根目录 `npm ci` 不包含 `@tauri-apps/plugin-http` 等子包依赖，不能用预构建镜像缓存假定它们已存在。
 - 验证：`npx vitest run apps/ai-game-creator-shell/tests/appSurface.test.ts -t "shows a clear login service error|explains a refused login connection|keeps the stored token when startup auth check cannot reach the service"`、`npm run check:git-hooks`、`npm run check:encoding`、`git diff --check`。

scripts/project-ci-workflow.test.ts

@@ -111,7 +111,11 @@ describe('project CI workflow', () => {
       expect(install).not.toContain('--prefix');
     }
 
-    for (const jobName of ['frontend-tests', 'native-shell-tests'] as const) {
+    for (const jobName of [
+      'repository-checks',
+      'frontend-tests',
+      'native-shell-tests',
+    ] as const) {
       const install = stepSection(
         jobName,
         'Install AI game creator dependencies',