feat: add Lustre quotas and Windows installed edition

[Stardust0831]

Summary

• add one-shot Lustre project, current-user, and primary-group quota inspection with partial-scope results and shared SSH reuse
• add prerelease-only unsigned per-user Windows x64/ARM64 installers while retaining six portable ZIPs
• add installed-edition Explorer navigation observation with bounded, identity-safe asynchronous VFS cache refresh
• harden downgrade/uninstall fail-closed behavior, COM teardown, path validation, and scheduler history

Verification

• Rust rewrite run 29827648882 passed quality and all six native targets before review hardening
• Rust rewrite run 29831703129 passed quality and all six native targets after review hardening
• independent sol_reviewer found no critical issues, then verified all 7 important and 2 minor findings closed in 18c78f5..137e0a3
• local cargo fmt --all --check, git diff --check, installer static checks, and workflow YAML parsing passed

Release boundary

• setup EXEs are unsigned and prerelease-only
• stable releases exclude setup EXEs
• signed update manifest remains limited to the six canonical portable ZIPs
• SHA256SUMS includes portable ZIPs and prerelease setup EXEs