ci: add Windows quality and packaging gates

Teach ESLint the classic renderer and mixed CommonJS harness runtimes while retaining actionable rules. Add deterministic credential, lockfile, release-manifest, and lint contracts plus equivalent GitHub and Gitea Windows pipelines. Gate clean installs, focused offline smoke coverage, builds, packaged launches, and silent installer verification without enabling authenticated network tests.

scripts/smoke-test-full.js

@@ -107,7 +107,7 @@ async function run() {
 
     await win.waitForTimeout(2200);
 
-    const summary = await win.evaluate(async ({ mediaA, mediaB, tmpDir }) => {
+    const summary = await win.evaluate(async () => {
       const failures = [];
       const checks = {};
 
@@ -357,10 +357,6 @@ async function run() {
       }
 
       return { checks, failures };
-    }, {
-      mediaA: mediaA.replace(/\\/g, '/'),
-      mediaB: mediaB.replace(/\\/g, '/'),
-      tmpDir: environment.mediaDir.replace(/\\/g, '/')
     });
 
     await app.close();