test(windows): verify daemon lifecycle and isolation

[jlongster]

Summary

• Add two focused real named-pipe daemon regressions: natural exit with contiguous attachment replay/live offsets and exact final state/status; independent terminals with observer disconnect and authenticated Input/control routing/dimensions.
• Preserve the strict cancellation/handoff/process assertions and reuse the existing console fixture. No production code changes.
• Add a small inert manual-only diagnostic hook. It pre-masks input from GITHUB_EVENT_PATH before step environment logging, bounds single-line gzip/base64 to 24,000 characters and decompressed strict UTF-8 to 256 KiB, verifies SHA-256, creates only the reserved untracked tests/windows-probe.rs path with CreateNew, and removes that file in finally.
• Ordinary committed tests still run normally. Only the optional diagnostic target is serial (--test-threads=1), with a five-minute step timeout. Workflow permissions remain contents:read, checkout credentials are not persisted, diagnostic Rust caches are not saved, and no source/packages are uploaded or published.

Verification

Basic test commit: dfb2967. Final candidate: 9f8f85c.

• Basic native gate: x64 and ARM64 each pass 34 library +5 effects +12 runtime +1 retained-pointer +7 daemon =59 tests, plus standalone34. Basic Core: Linux61/macOS56/Miri6+6 passed.
• Final candidate Windows: both native architectures pass the same59 tests, standalone34, Clippy, formatting, architecture checks, and executable smoke. Optional input/execution steps are correctly skipped on a PR run.
• Final Core: Linux61, macOS56, and Miri6+6 passed. Linux passed on one exact-head retry after the unchanged foreground-process fixture hung in the first attempt; that timeout remains recorded and is not claimed repaired.
• Local full Linux61, locked all-target/all-feature Clippy, formatting, actionlint, and actual Ghostty5+Retained1 Miri tests under both borrow models passed.
• The hook parses under PowerShell7.5.2. Local delivery-only validation with mocked cargo checked encoded/decompressed bounds, strict UTF-8, digest mismatch, preexisting-file refusal, and exact-file cleanup after success/failure. No actual remote diagnostic dispatch has occurred.

Stack and scope

Base: windows-daemon at040087b4fbcd8ae2e5ebc3c77d36abfd11510860 (#16). Lower implementation refs remain frozen.

V1 is complete at the exact head above and source is frozen. No extensive probe bodies are in Git. Approved temporary V2 batches are prepared outside the repository only; dispatch still awaits explicit coordinator authorization. The earlier inconclusive Linux foreground-fixture timeouts remain recorded, and no assertion is weakened or excluded Unix blocked-master-write redesign attempted. No merges or publication.