Loosen scriban validation

src/ApiService/ApiService/onefuzzlib/notifications/NotificationsBase.cs

@@ -138,7 +138,7 @@ public async Async.Task<string> Render(string templateString, Uri instanceUrl, b
                 true => new TemplateContext {
                     EnableRelaxedFunctionAccess = false,
                     EnableRelaxedIndexerAccess = false,
-                    EnableRelaxedMemberAccess = false,
+                    EnableRelaxedMemberAccess = true,
                     EnableRelaxedTargetAccess = false
                 },
                 _ => new TemplateContext()

src/ApiService/IntegrationTests/JinjaToScribanMigrationTests.cs

@@ -362,6 +362,12 @@ public async Async.Task Access_WithoutAuthorization_IsRejected() {
         result.StatusCode.Should().Be(System.Net.HttpStatusCode.BadRequest);
     }
 
+    [Fact]
+    public async Async.Task Do_Not_Enforce_Key_Exists_In_Strict_Validation() {
+        (await JinjaTemplateAdapter.IsValidScribanNotificationTemplate(Context, Logger, ValidScribanAdoTemplate()))
+            .Should().BeTrue();
+    }
+
     private async Async.Task ConfigureAuth() {
         await Context.InsertAll(
             new InstanceConfig(Context.ServiceConfiguration.OneFuzzInstanceName!) { Admins = new[] { _userObjectId } } // needed for admin check
@@ -412,4 +418,19 @@ private static GithubIssuesTemplate MigratableGithubTemplate() {
     private static TeamsTemplate GetTeamsTemplate() {
         return new TeamsTemplate(new SecretData<string>(new SecretValue<string>("https://example.com")));
     }
+
+    private static AdoTemplate ValidScribanAdoTemplate() {
+        return new AdoTemplate(
+            new Uri("http://example.com"),
+            new SecretData<string>(new SecretValue<string>("some secret")),
+            "{{ if task.tags.project }} blah {{ end }}",
+            string.Empty,
+            Array.Empty<string>().ToList(),
+            new Dictionary<string, string>(),
+            new ADODuplicateTemplate(
+                Array.Empty<string>().ToList(),
+                new Dictionary<string, string>(),
+                new Dictionary<string, string>()
+        ));
+    }
 }