fix(desktop): hand off Windows bootstrap recovery

[teknium1]

Summary

Windows Desktop recovery now hands broken bootstrap installs back to Hermes Setup so the running app releases app.asar before installer repair touches the checkout.

Changes

• Desktop main process: when packaged Windows resolves to bootstrap-needed, spawn staged hermes-setup.exe in detached recovery mode and quit instead of running install.ps1 from inside the app bundle that is still holding app.asar.
• Bootstrap updater: wait on both the venv shim and packaged resources/app.asar before update/repair proceeds, then force-kill Hermes stragglers if either stays locked.
• Regression coverage: static child-process test documents the Windows handoff path; Rust lock-probe unit tests cover app.asar lock targets.

Validation

Check	Result
node --check apps/desktop/electron/main.cjs	pass
node --test --test-name-pattern "intentional or interactive desktop child processes stay documented" apps/desktop/electron/windows-child-process.test.cjs	pass
git diff --check origin/main..HEAD	pass
cargo test lock --manifest-path apps/bootstrap-installer/src-tauri/Cargo.toml	blocked locally: Linux host is missing dbus-1.pc / libdbus-1-dev, before tests compile

Root cause from the user logs: repair/bootstrap was trying to remove apps/desktop/release/win-unpacked/resources/app.asar while the packaged Desktop process still had that asar loaded.

Infographic

[github-actions]

🔎 Lint report: hermes/hermes-189c3afb vs origin/main

ruff

Total: 0 on HEAD, 0 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 0 pre-existing issues carried over.

ty (type checker)

Total: 10890 on HEAD, 10890 on base (➖ 0)

🆕 New issues: none

✅ Fixed issues: none

Unchanged: 5713 pre-existing issues carried over.

Diagnostics are surfaced as warnings — this check never fails the build.