[browser][coreclr] - JSExport via single UCO instead of reflection, don't use AllowUnsafeBlocks

[pavelsavara]

• use token for the method to resolve it.
• consider backward compatibility
• don't use <AllowUnsafeBlocks>true</AllowUnsafeBlocks>

[dotnet-policy-service]

Tagging subscribers to 'arch-wasm': @lewing, @pavelsavara
See info in area-owners.md if you want to be subscribed.