Harden Windows DLP enforcement and Electron runtime packaging

apps/server/company-news.mjs

@@ -29,6 +29,7 @@ function download(url,{address,family,signal}){
   });req.on('timeout',()=>req.destroy(Error('News request timeout')));req.on('error',reject);
  });
 }
+// eslint-disable-next-line no-control-regex -- Explicitly reject control characters in security-sensitive input.
 const plain=value=>value.replace(/<[^>]*>/g,' ').replace(/[\u0000-\u001f\u007f]/g,' ').replace(/\s+/g,' ').trim();
 export function parseCompanyNews(bytes){
  if(bytes.length>MAX_BYTES)throw Error('News feed too large');