Replace WMI queries with direct API calls

[aramprice]

Based on #78

[Copilot]

Pull Request Overview

This PR replaces WMI queries with direct Windows API calls for retrieving process information, specifically implementing process argument retrieval functionality. The change modernizes the codebase by using native Windows system calls instead of WMI queries, which typically provides better performance and reduces external dependencies.

Key changes:

• Added syscall wrappers for ReadProcessMemory and GetTickCount64 Windows APIs
• Implemented utility functions to read process memory structures and parse Unicode strings
• Replaced ErrNotImplemented placeholder with actual implementation in ProcArgs.Get()

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
sys/windows/zsyscall_windows.go	Added low-level syscall wrappers for ReadProcessMemory and GetTickCount64 Windows APIs
sys/windows/syscall_windows.go	Implemented helper functions for reading process memory structures, parsing Unicode strings, and processing command-line arguments
sigar_windows.go	Replaced stub implementation of ProcArgs.Get() with working code that retrieves process arguments using direct API calls

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[jorbaum]

@aramprice I guess since you got this merged we can revert my change and increase windows-2022 to windows-latest again?

See also #77 (comment)

[aramprice]

@jorbaum - good call out, thank you. Created #82