fix: deploy TaskQuery script scope and internal autotests (2.0.32-SAC)

Publish TaskQuery helpers to script scope after import so deploy checks work from nested callers; add kalinamall-only smoke tests and RDP_DEPLOY_FUNCTIONS_ONLY hook.

Co-authored-by: Cursor <cursoragent@cursor.com>

tools/tests/Test-DeployTaskLimit.ps1

@@ -0,0 +1,22 @@
+. (Join-Path $PSScriptRoot '_TestLib.ps1')
+. (Join-Path $PSScriptRoot '_DeployFunctionsLoader.ps1')
+$repo = Get-RdpMonitorRepoRoot
+
+Invoke-RdpMonitorTestCase -Name 'Deploy functions load (RDP_DEPLOY_FUNCTIONS_ONLY)' -Script {
+    Assert-CommandExists -Name 'Initialize-RdpMonitorDeployTaskQuery'
+    Assert-CommandExists -Name 'Test-RdpMonitorDeployMainTaskNeedsUnlimitedExecutionTime'
+    Assert-CommandExists -Name 'Write-RdpMonitorDeployScheduledTaskVerification'
+    Assert-CommandExists -Name 'Get-RdpMonitorDeployTaskExecutionTimeLimitLabelFromResolved'
+}
+
+Invoke-RdpMonitorTestCase -Name 'Deploy pre-check task limit (no throw on early path)' -Script {
+    $needsFix = Test-RdpMonitorDeployMainTaskNeedsUnlimitedExecutionTime -ShareRoot $repo -TaskName 'RDP-Login-Monitor-UnitTest-Missing'
+    Assert-True -Condition ($needsFix -is [bool]) -Message 'Test-RdpMonitorDeployMainTaskNeedsUnlimitedExecutionTime must return bool'
+}
+
+Invoke-RdpMonitorTestCase -Name 'Deploy verification after Initialize (no missing command)' -Script {
+    [void](Initialize-RdpMonitorDeployTaskQuery -ShareRoot $repo)
+    Assert-CommandExists -Name 'Get-RdpMonitorScheduledTaskExecutionTimeLimitResolved'
+    $ok = Write-RdpMonitorDeployScheduledTaskVerification -ShareRoot $repo -TaskName 'RDP-Login-Monitor-UnitTest-Missing'
+    Assert-True -Condition ($ok -is [bool]) -Message 'Write-RdpMonitorDeployScheduledTaskVerification must return bool'
+}