feat(CT6): character window Y-resize clamped at retail's authored host minimum + shrink-and-scroll list contract

CT6 (Campaign CT slice 6): the resize clamp source is the SHARED
gmPanelUI host (0x100005FE in LayoutDesc 0x2100006E), not 0x2100002E's
own root and not the Character/Skills slot 0x1000018E either — live
probe confirmed the host authors MinWidth=MaxWidth=310 (fixed — no
horizontal Resizebar authored), MinHeight=372, MaxHeight=1000, and that
the bottom Resizebar (0x10000660) and top Dragbar (0x1000065C) are
direct children of the host, not the content parent. Decomp chain:
UIElement_Resizebar::StartMouseResizing @0x0046B7E0 calls
UIElement::StartResizing(this->GetParent(), ...), stashing drag state on
that parent; UIElement::MouseResizeElement @0x00461130 then reads
GetAttribute_Int(this, 0x3C..0x3F) off that same element every
mouse-move.

RetailUiRuntime.MountCharacter now imports the host element and passes
it as RetailWindowFrame.Options.DatConstraintSource, matching the
existing MountSideVitals pattern.

CharacterStatController.RebuildActiveList now wraps BOTH the Attributes
and Skills tabs' rows in the same UiScrollablePanel viewport (previously
only Skills got one; Attributes rows had no clipping/scrolling and the
shared scrollbar was force-hidden — owner report item 2). The shared
scrollbar is now always bound + visible; UiScrollbar's own
IsPresentationVisible/IsModelDisabled already draw the correct
full-track "disabled" thumb when content fits. This surfaced and fixed
a real #372/#412-class anchor-baseline bug: the viewport's
Left|Top|Bottom anchor was capturing its baseline margins lazily on its
own first ApplyAnchor call, which happens AFTER the ListBox has already
grown from its raw DAT height to its mounted height, permanently
capping the viewport short on every later resize. Fixed with an eager
CaptureCurrentAnchorBaseline() call, mirroring UiTemplateListBox
.Viewport's own lazy getter.

CharacterTitlesController.Bind gained the same defensive
Anchors = Left|Top|Bottom fallback for the Titles ListBox that
CharacterStatController already had (a no-op on the real DAT — both the
Titles page and its ListBox already carry a real authored LayoutPolicy
that stretches correctly).

Standardization audit: UiElement.MinWidth/MinHeight/MaxWidth/MaxHeight,
set once at RetailWindowFrame.Mount, are the ONLY clamp fields — read
identically by interactive drag, RetailWindowManager.ResizeTo, and
RetailWindowLayoutPersistence's restore clamp. No gaps found; no
register row (every number is a live-probed authored DAT value or a
structural correctness fix, nothing inferred).

Tests: CharacterStatControllerTests
.CharacterWindow_ResizesYWithinAuthoredHostClamp_AndReflowsListAndScrollbar,
CharacterTitlesControllerTests
.TitlesList_ReflowsWithWindowResize_AndScrollbarOverflowFlips,
RetailWindowFrameTests
.NineSlice_ChatShapedConstraints_ClampProgrammaticResizeAtAuthoredBounds
(shared-mechanism regression pin), CharacterPanelLiveDatTests
.PanelHost_AuthorsFixedWidthAndBottomOnlyResizeContract (InstalledDat
pin). Existing attribute-row tests updated from list.Children to
Descendants(list) for the new nested-viewport shape (the pattern skill
rows already needed).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

tests/AcDream.App.Tests/UI/Layout/RetailWindowFrameTests.cs

@@ -137,6 +137,60 @@ public sealed class RetailWindowFrameTests
         Assert.Equal(0.75f, frame.Opacity);
     }
 
+    /// <summary>
+    /// CT6 shared-mechanism regression pin: the authored-min/max clamp exists
+    /// in exactly ONE place — <see cref="UiElement.MinWidth"/>/<see cref="UiElement.MaxWidth"/>/
+    /// <see cref="UiElement.MinHeight"/>/<see cref="UiElement.MaxHeight"/>,
+    /// set once at <see cref="RetailWindowFrame.Mount"/> from
+    /// <see cref="RetailWindowFrame.Options.DatConstraintSource"/> and then
+    /// enforced identically by <c>RetailWindowManager.ResizeTo</c> (this
+    /// test), the interactive drag path in <c>UiRoot</c>, and the persisted-
+    /// geometry restore clamp in <c>RetailWindowLayoutPersistence.Apply</c>.
+    /// Chat (<c>0x2100006F</c>) was the FIRST window to author real DAT
+    /// min/max (min 300/100, max 2000/2000 per
+    /// <c>CharacterPanelLiveDatTests.ChatWindowRoot_AuthorsExplicitSizeConstraints</c>);
+    /// this test proves an interactive-shaped <c>ResizeTo</c> call against a
+    /// chat-shaped mount still clamps at those authored bounds after CT6
+    /// wired a SECOND window (Character) onto the same mechanism — a
+    /// regression here would mean CT6 accidentally special-cased Character
+    /// instead of reusing the standard path.
+    /// </summary>
+    [Fact]
+    public void NineSlice_ChatShapedConstraints_ClampProgrammaticResizeAtAuthoredBounds()
+    {
+        var root = new UiRoot { Width = 1920, Height = 1080 };
+        var content = new UiPanel { Width = 490, Height = 100 };
+        var constraints = Constraints(minHeight: 100, maxHeight: 2000);
+
+        RetailWindowHandle handle = RetailWindowFrame.Mount(
+            root,
+            content,
+            NoTex,
+            new RetailWindowFrame.Options
+            {
+                WindowName = "chat",
+                Chrome = RetailWindowChrome.NineSlice,
+                Left = 10,
+                Top = 20,
+                ResizeX = false,
+                ResizeY = true,
+                DatConstraintSource = constraints,
+            });
+
+        // Request far below the authored minimum (100 + 10px chrome inset =
+        // 110) — the clamp must hold, not the requested value.
+        Assert.True(handle.ResizeTo(handle.Width, 5f));
+        Assert.Equal(110f, handle.Height);
+
+        // Request far above the authored maximum (2000 + 10 = 2010).
+        Assert.True(handle.ResizeTo(handle.Width, 50000f));
+        Assert.Equal(2010f, handle.Height);
+
+        // A request inside the bounds is honored exactly.
+        Assert.True(handle.ResizeTo(handle.Width, 500f));
+        Assert.Equal(500f, handle.Height);
+    }
+
     [Fact]
     public void NineSlice_CanSupplyBorderWithoutDuplicatingAuthoredCenter()
     {