d1fa5143e8
Add fws-windows-deploy script for secure, offline Windows 11 deployment on dedicated disk. Features: - Fail-closed safety validation (disk, ISO, protected mounts) - Partition carving with sgdisk (ESP, MSR, NTFS, swap) - WIM image application via wimlib - BCD bootloader setup with hivex fallback - Offline BitLocker prevention - Answer file injection and gameboot component - FWS hibernation swap provisioning - Comprehensive guards against accidental data loss Script runs in %post --nochroot during ISO build, targets /mnt/sysroot.