Windows tunnel and TytusOS desktop install path

[rschumann]

Follow-up from TytusOS tray cutover PR #11.

Current Windows install matrix is intentionally limited:

• CLI/auth/MCP/link basics supported.
• Tunnel/connect blocked until Wintun is bundled.
• TytusOS browser/tray parity is not promised yet.

Task:

1. Bundle or install Wintun safely for tytus connect.
2. Decide Windows desktop mode: tray app, Start Menu shortcut that opens local TytusOS, or browser-only daemon UI.
3. Package the required binaries/artifacts in release workflow.
4. Update install.ps1 from source-only CLI basics to a user-friendly Windows desktop path once validated.

Acceptance:

• Fresh Windows user can install, login, connect, and open TytusOS with no manual Rust/dev steps unless explicitly using source mode.
• Failure modes print exact recovery commands and logs.