✨ feat(windows): add safe one-click CPA launcher

[systemoutprintlnhelloworld]

Summary

• add a Windows launcher that starts CLIProxyAPI and CPA Manager Plus together without fixed installation paths
• validate PID start time, executable path, port ownership, authenticated completion, collector health, and SQLite ingestion before opening the panel
• add current-user Start Menu/Desktop shortcut management, CMD %* forwarding, logs, cross-process locking, rollback, release packaging, and documentation

Test plan

• go test ./internal/http/controller/health ./internal/http/router
• go build ./cmd/cpa-manager-plus
• parse bin/native/cpa-launcher.ps1 with the PowerShell AST parser
• run cpa-launcher.ps1 status -NoPause
• git diff --check
• go test ./... on Windows: all relevant packages pass, but the existing internal/security test expects POSIX mode 0600 and observes 0666 on Windows