Relocate test project: test/yavscTests -> src/Yavsc.Org.Tests

Move the integration test project from the top-level test/ directory into
src/ alongside the projects it tests. Rename the project (and folder) to
Yavsc.Org.Tests to match .NET conventions and reflect that it tests the
Org runtime primarily.

Path changes:
- test/yavscTests/yavscTests.csproj -> src/Yavsc.Org.Tests/Yavsc.Org.Tests.csproj
- All .cs / .json / .resx files moved to their new location
- PostItViewModelTests moved out to the dedicated src/PostIt.Tests project
  (it was unrelated to Org testing)

Build adjustments:
- <ProjectReference> paths shortened (..\..\src\X -> ..\X)
- PostIt project reference removed (covered by its own test project)
- <OutputType>exe added (required by xunit.v3)
- xunit.v3.common and xunit.v3.extensibility.core added to package versions

Solution + sln:
- yavsc.sln Project Name updated to 'Yavsc.Org.Tests' and path updated
- GUID preserved so existing build configs stay valid

Static web assets:
- The CopyStaticWebAssetsManifest target was hard-coding the destination
  filename to 'testhost.staticwebassets.endpoints.json', which worked
  when the assembly was named 'yavscTests'. Now that the assembly name
  is 'Yavsc.Org.Tests', ASP.NET Core's MapStaticAssets() looks for
  'Yavsc.Org.Tests.staticwebassets.endpoints.json' (entry-assembly-based
  resolution). Use $(MSBuildProjectName) so the copy target stays
  correct under any future rename.

src/Yavsc.Org.Tests/Mandatory/Remoting.cs

@@ -0,0 +1,100 @@
+using System.Security.Cryptography.X509Certificates;
+using System.Net.Security;
+using yavscTests.ServerFixtures;
+using IdentityModel.Client;
+
+namespace yavscTests
+{
+    [Collection("Yavsc Server")]
+    [Trait("regression", "oui")]
+    public class Remoting : BaseTestContext, IClassFixture<WebServerFixture>
+    {
+        public Remoting(WebServerFixture serverFixture, ITestOutputHelper output)
+        : base(output, serverFixture)
+        {
+
+        }
+
+
+        [Fact]
+        public async Task ObtainServiceToken()
+        {
+            var serverUrl = _serverFixture.Addresses.FirstOrDefault(u => u.StartsWith("https:"));
+            if (string.IsNullOrEmpty(serverUrl))
+                throw new InvalidOperationException("No HTTPS server address found");
+
+            HttpClient client = NewHttpClient();
+            var disco = await client.GetDiscoveryDocumentAsync(serverUrl);
+            if (disco.IsError) throw new Exception(disco.Error);
+
+            var response = await client.RequestClientCredentialsTokenAsync(new ClientCredentialsTokenRequest
+            {
+                Address = disco.TokenEndpoint,
+                ClientId = _serverFixture.TestClientId,
+                ClientSecret = _serverFixture.TestClientSecret,
+                Scope = "test",
+                GrantType = "client_credentials"
+            });
+            if (response.IsError) throw new Exception(response.Error);
+        }
+
+        private static HttpClient NewHttpClient()
+        {
+            return new HttpClient(new BypassSslValidationHandler());
+        }
+
+        [Fact]
+        public async Task ObtainResourceOwnerPasswordToken()
+        {
+            var serverUrl = _serverFixture.Addresses.FirstOrDefault(u => u.StartsWith("https:"));
+            if (string.IsNullOrEmpty(serverUrl))
+                throw new InvalidOperationException("No HTTPS server address found");
+
+            var client = NewHttpClient();
+            var disco = await client.GetDiscoveryDocumentAsync(serverUrl);
+            if (disco.IsError) throw new Exception(disco.Error);
+
+            var response = await client.RequestPasswordTokenAsync(new PasswordTokenRequest
+            {
+                Address = disco.TokenEndpoint,
+                ClientId = _serverFixture.TestClientId,
+                ClientSecret = _serverFixture.TestClientSecret,
+                UserName = _serverFixture.TestingUserName,
+                Password = _serverFixture.TestingUserPassword,
+                Scope = "test",
+                Parameters =
+                {
+                    { "acr_values", "tenant:custom_account_store1 foo bar quux" }
+                }
+            });
+
+            if (response.IsError) throw new Exception(response.Error);
+
+        }
+
+        public static IEnumerable<object[]> GetLoginIntentData()
+        {
+            return new object[][] { new object[] { "testuser", "test" } };
+        }
+
+    }
+
+    internal class BypassSslValidationHandler : HttpClientHandler
+    {
+        public BypassSslValidationHandler()
+        {
+            // Override validation for this handler only
+            ServerCertificateCustomValidationCallback = ValidateCertificate;
+        }
+
+        private bool ValidateCertificate(
+            HttpRequestMessage request,
+            X509Certificate2? certificate,
+            X509Chain? chain,
+            SslPolicyErrors errors)
+        {
+            // Accept all certificates (bypass validation)
+            return true;
+        }
+    }
+}