Harden Windows DLP enforcement and Electron runtime packaging

apps/browser/inspection.cjs

@@ -46,6 +46,7 @@ function startInspector(root,packaged=false,options={}){
       if(!['allow','block'].includes(result.decision)||typeof result.coverage?.complete!=='boolean')throw Error('Inspector response rejected');
       if(result.decision==='allow'&&!result.coverage.complete)throw Error('Incomplete content cannot be released');
       const stages=result._diagnosticStages;delete result._diagnosticStages;if(policy?.diagnostics?.enabled===true&&policy.diagnostics.mode==='debug'&&typeof options.onStages==='function'){try{options.onStages(stages);}catch{}}return result;
+    // eslint-disable-next-line preserve-caught-error -- Expose only a fixed sanitized error; the original cause may contain sensitive paths or data.
     }catch(error){if(error.name==='AbortError'){child.kill();throw Error('Content inspection exceeded its time budget');}throw error;}
     finally{clearTimeout(timer);}
   };