Fix powershell issues

Author: johnml1135

.vscode/settings.json

@@ -40,6 +40,13 @@
     "/^(&\\s+)?git\\s+(worktree\\s+list|remote(\\s+(-v|show))?|config\\s+--get)(?!.*[;&|<>])/": true,
     "/^(&\\s+)?git\\s+stash(\\s+(push|apply|pop|list|show|drop|branch)(\\s+[^;&|<>]+)*)?(?!.*[;&|<>])/": true,
 
+    // GitHub CLI read-only operations only
+    // Explicitly allow read verbs (view/list/status/search) and block chained/redirection patterns.
+    "/^(&\\s+)?gh\\s+(pr|issue|repo|run|release|workflow|label|milestone|project|discussion|gist)\\s+(view|list|status)\\b(?!.*[;&|<>])/i": true,
+    "/^(&\\s+)?gh\\s+search\\s+(prs|issues|repos|commits|code)\\b(?!.*[;&|<>])/i": true,
+    // gh api is approved only when no explicit mutating method is specified.
+    "/^(&\\s+)?gh\\s+api\\b(?!.*\\s(-X|--method)\\s*(POST|PUT|PATCH|DELETE)\\b)(?!.*[;&|<>])/i": true,
+
     // Python/scripting (consolidated)
     "/^(&\\s+)?python\\s+(scripts\\/|-m|\\.github\\/)(?!.*[;&|<>])/": true,
     "/^(&\\s+)?\\.[\\\\/]scripts[\\\\/](?!.*[;&|<>])/": true,

Build/Agent/FwBuildHelpers.psm1

@@ -128,7 +128,7 @@ function Stop-ConflictingProcesses {
 function Get-WorktreeMutexName {
     param([Parameter(Mandatory)][string]$RepoRoot)
 
-    $normalizedRepoRoot = [System.IO.Path]::GetFullPath($RepoRoot).TrimEnd('\\', '/')
+    $normalizedRepoRoot = [System.IO.Path]::GetFullPath($RepoRoot).TrimEnd('\', '/')
     $normalizedRepoRoot = $normalizedRepoRoot.ToLowerInvariant()
 
     $bytes = [System.Text.Encoding]::UTF8.GetBytes($normalizedRepoRoot)
@@ -142,7 +142,7 @@ function Get-WorktreeMutexName {
 
     $hash = [System.BitConverter]::ToString($hashBytes).Replace('-', '')
     $shortHash = $hash.Substring(0, 16)
-    return "Global\\FieldWorks.Worktree.$shortHash"
+    return "Global\FieldWorks.Worktree.$shortHash"
 }
 
 function Enter-WorktreeLock {
@@ -178,7 +178,7 @@ function Enter-WorktreeLock {
             $hasHandle = $true
         }
 
-        $lockPath = Join-Path $RepoRoot "Output\\WorktreeRun.lock.json"
+        $lockPath = Join-Path $RepoRoot 'Output' | Join-Path -ChildPath 'WorktreeRun.lock.json'
 
         if (-not $hasHandle) {
             $ownerDetails = $null