fix: use bridge metro runtime descriptors

[thymikee]

Summary

Use bridge-provided Metro runtime descriptors as the source of truth for bridged Metro sessions.

• stop sending a synthesized iOS ios_runtime.metro_bundle_url in /api/metro/bridge requests
• allow bridge-backed Metro prep to omit metroPublicBaseUrl and rely on metroProxyBaseUrl as the bridge origin
• assert bridged descriptors include an iOS runtime bundle URL before exposing runtime hints to consumers
• update Metro tests, smoke fixtures, docs, and skill guidance for iOS wildcard HTTPS descriptors and Android /api/metro/runtimes/<runtimeId>/... routes

Touched files: 17. Scope stayed within the remote Metro/client API and related docs/tests.

Compatibility note: this expects a descriptor-driven bridge server that accepts /api/metro/bridge without a client-provided ios_runtime. Older bridge servers that still require ios_runtime.metro_bundle_url need to be updated before pairing with this client behavior.

Validation

• pnpm format
• pnpm check:quick
• pnpm check:unit
• node --test test/integration/installed-package-metro.test.ts

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://callstackincubator.github.io/agent-device/pr-preview/pr-425/
Built to branch gh-pages at 2026-04-17 17:51 UTC. Preview will be ready when the GitHub Pages deployment is complete.