fix(smoke): stage cbm-integrations.json in the Windows smoke path too

The Windows pr-smoke uses test-infrastructure/vm/vm-smoke.sh, the Windows analog
of smoke-local.sh, which had the same three staging gaps the Unix fix closed:
its required-sidecar check, fixture copy, and zip member list all omitted
cbm-integrations.json, so the served archive lacked the asset and install/
uninstall failed closed with "integration assets missing".

Plus one Windows-specific spot: vm-smoke.sh copies the smoke binary into
$SMOKE_DIR and runs smoke-test.sh against it there, but the asset only reached
$FIXTURE_DIR — so Phase 14 (which hand-stages the binary and drives an
uninstall, resolving the asset next to the binary) missed it. Now staged next to
the binary in $SMOKE_DIR as well. build.sh already places it next to
build/c/*.exe, so the non-artifact source is $(dirname BINARY_SRC); artifact
mode takes the release copy.

Member set + order in the zip mirror scripts/package-release.sh (Windows).
vm-smoke.sh lives under test-infrastructure/, outside the license gate's scan
set, so the cbm-integrations.json/LICENSE adjacency raises no ScanCode finding
there. Syntax-checked; vm-worktree-manifest, smoke-fixture and windows-bundle
contracts pass. The Unix smoke already runs clean through all 16 phases; this
mirrors that staging onto the one path I cannot exercise locally.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

Author: DeusData

test-infrastructure/vm/vm-smoke.sh

@@ -59,7 +59,7 @@ ARTIFACT_DIR="${CBM_SMOKE_ARTIFACT_DIR:-}"
 if [ -n "$ARTIFACT_DIR" ]; then
     ARTIFACT_DIR="$(cd "$ARTIFACT_DIR" && pwd)"
     for required in codebase-memory-mcp.exe \
-        LICENSE install.ps1 THIRD_PARTY_NOTICES.md; do
+        cbm-integrations.json LICENSE install.ps1 THIRD_PARTY_NOTICES.md; do
         [ -s "$ARTIFACT_DIR/$required" ] ||
             { echo "vm-smoke: release artifact is missing $required" >&2; exit 2; }
     done
@@ -146,22 +146,37 @@ MSYS2_ARG_CONV_EXCL='*' powershell.exe -NoProfile -ExecutionPolicy Bypass \
     -SmokeRoot "$(cygpath -w "$SMOKE_DIR")"
 cp "$BINARY_SRC" "$SMOKE_DIR/codebase-memory-mcp.exe"
 cp "$SMOKE_DIR/codebase-memory-mcp.exe" "$FIXTURE_DIR/"
+# The integration asset must sit next to the smoke binary in $SMOKE_DIR: phases
+# that invoke it directly (Phase 14 stages it by hand and drives an uninstall)
+# resolve the asset next to the binary, and without it those render-template
+# operations fail closed. Its own copy lands in the served archive below.
+if [ -n "$ARTIFACT_DIR" ]; then
+    ASSET_SRC="$ARTIFACT_DIR/cbm-integrations.json"
+else
+    ASSET_SRC="$(dirname "$BINARY_SRC")/cbm-integrations.json"
+fi
+cp "$ASSET_SRC" "$SMOKE_DIR/cbm-integrations.json"
 # The install/update phases fetch these out of the served archive, so they must
 # be the artifact's own copies whenever one was supplied — regenerating them
 # here would smoke a sidecar the release never ships.
 if [ -n "$ARTIFACT_DIR" ]; then
-    cp "$ARTIFACT_DIR/LICENSE" "$ARTIFACT_DIR/install.ps1" \
-        "$ARTIFACT_DIR/THIRD_PARTY_NOTICES.md" "$FIXTURE_DIR/"
+    cp "$ARTIFACT_DIR/cbm-integrations.json" "$ARTIFACT_DIR/LICENSE" \
+        "$ARTIFACT_DIR/install.ps1" "$ARTIFACT_DIR/THIRD_PARTY_NOTICES.md" "$FIXTURE_DIR/"
 else
-    cp LICENSE install.ps1 "$FIXTURE_DIR/"
+    # build.sh stages cbm-integrations.json next to the binary; ship it in the
+    # archive so the installed binary can verify and render its templates.
+    cp "$(dirname "$BINARY_SRC")/cbm-integrations.json" LICENSE install.ps1 "$FIXTURE_DIR/"
     scripts/gen-third-party-notices.sh "$FIXTURE_DIR/THIRD_PARTY_NOTICES.md"
 fi
 
+# Member set + ORDER mirror scripts/package-release.sh (Windows): the install
+# verifies cbm-integrations.json against the binary's embedded SHA-256 and fails
+# closed without it.
 EXPECTED_ARTIFACT="codebase-memory-mcp${SUFFIX}-windows-${SMOKE_ARCH}.zip"
 (
     cd "$FIXTURE_DIR"
     zip -q "$EXPECTED_ARTIFACT" \
-        codebase-memory-mcp.exe LICENSE install.ps1 THIRD_PARTY_NOTICES.md
+        codebase-memory-mcp.exe cbm-integrations.json LICENSE install.ps1 THIRD_PARTY_NOTICES.md
     if [ -n "$SUFFIX" ]; then
         cp "$EXPECTED_ARTIFACT" "codebase-memory-mcp-windows-${SMOKE_ARCH}.zip"
     fi