feat: complete WorkBuddy parity and Windows release workflow

scripts/fixtures/git-transport/README.md

@@ -0,0 +1,15 @@
+# Git transport test fixtures
+
+Install the pinned, test-only HTTP/HTTPS and SSH server libraries:
+
+```powershell
+npm ci --prefix scripts/fixtures/git-transport --ignore-scripts --no-audit --no-fund
+```
+
+The independent lockfile avoids changing YCode's Electron/Vite dependency tree.
+The fixtures generate temporary certificates and SSH keys, listen only on
+loopback, and serve test-owned repositories. The client under test is YCode's
+actual bundled Git/HTTPS/OpenSSH runtime and native control Job. No paid API,
+public Git provider, production credential or production repository is used.
+Optional native dependency build scripts are disabled; SSH2 uses its JS fallback.
+These packages are not application runtime dependencies and are not packaged.