chore(samples): update sample package versions (patch and minor) #588

Part 2 of the outdated-package sweep (dotnet-outdated 4.8.1, 2026-11-05). Brings the samples up to date for patch and minor versions. Related: #584 / PR #586 already bumped Microsoft.AspNetCore.Components.WebAssembly.Server to 10.0.14 in the Blazor WASM server.

Scope (this PR only)

Only files under samples/. Samples reference published NuGet packages, not the in-repo projects.

Datasync packages: 10.1.0 -> 10.1.2

CommunityToolkit.Datasync.Client, .Server, .Server.EntityFrameworkCore, .Server.InMemory in:

• samples/todoapp-tutorial/ClientApp/ClientApp.csproj, samples/todoapp-tutorial/ServerApp/ServerApp.csproj
• samples/todoapp-blazor-wasm/TodoApp.BlazorWasm.Client|Server/*.csproj
• samples/todoapp-mvc/TodoApp.Service/TodoApp.Service.csproj
• samples/todoapp/TodoApp.Avalonia/TodoApp.Avalonia/*.csproj, TodoApp.MAUI, TodoApp.WPF, TodoApp.WinUI3
• samples/todoapp/TodoApp.Uno/Directory.Packages.props

Microsoft 10.0.9 -> 10.0.14

Microsoft.EntityFrameworkCore, .InMemory, .SqlServer, .Tools, Microsoft.AspNetCore.OpenApi, Microsoft.AspNetCore.Components.WebAssembly and .DevServer (keep PrivateAssets="all"), Microsoft.Extensions.Http, Microsoft.Extensions.DependencyInjection (WinUI3), Microsoft.Extensions.Logging.Debug (MAUI), System.IO.Packaging (Uno props).
Affected: datasync-server/src/Sample.Datasync.Server, todoapp-blazor-wasm/*, todoapp-mvc/TodoApp.Service, todoapp/TodoApp.Avalonia/TodoApp.Avalonia, TodoApp.MAUI, TodoApp.WinUI3, TodoApp.Uno.

Other patches

Minor bumps (could not be scanned locally: need mobile workloads; verify via CI only)

If a CI job for MAUI, Uno or Avalonia.Android fails after one of these three bumps and the fix is not trivial, revert that single bump, note it in the PR description, and open a follow-up issue rather than blocking the rest.

Explicitly NOT in this PR

• Microsoft.WindowsAppSDK 1.7 -> 2.x (separate issue).
• Microsoft.OData.Core/Edm 8.4.3 in datasync-server and datasync-server-cosmosdb-singlecontainer: bump to 8.4.4 only (patch, same line), not 9.0.0 (separate blocked issue).
• Refit 8.0.0 in TodoApp.Uno/Directory.Packages.props: there is no PackageReference to it in the csproj (it is an Uno SDK implicit package version). The reported "latest 16.4.0" is a different version scheme; leave unchanged and mention in the PR.

Steps

1. Verify target versions exist on NuGet (https://api.nuget.org/v3-flatcontainer/<lowercase-id>/index.json).
2. Make the edits. Samples cannot all be built locally (per AGENTS.md: do not install workloads). Locally build only what works, e.g. cd samples/todoapp-blazor-wasm && dotnet build TodoApp.BlazorWasm.sln, samples/todoapp-tutorial, samples/todoapp-mvc/part5.sln, samples/datasync-server.
3. Push the branch to the fork and dispatch build-samples.yml with --ref <branch>; watch all jobs plus all-samples-built (~6-8 min).
4. Re-run dotnet-outdated on each sample solution (use EnableWindowsTargeting=true for WPF/WinUI3) and confirm only the explicitly excluded packages remain.

Acceptance criteria

• Packages above at target versions; build-samples.yml all green.
• No vulnerability warnings (NU190x) in sample restores.
• PR title: chore(samples): update sample package versions.