Harden Windows DLP enforcement and Electron runtime packaging

scripts/verify-package.mjs

@@ -83,6 +83,7 @@ try{
   console.log('Packaged security sources, Windows upload handle lease, Windows-contained inspector, offline EmbeddingGemma 2 CPU inference, legacy and individual Windows agent helpers and bundled DPAPI runtime passed.');
 }finally{
   await service?.close();
+  // eslint-disable-next-line no-unsafe-finally -- Cleanup failure must fail closed rather than report successful protected cleanup.
   if(!temporary.startsWith(path.join(os.tmpdir(),'safetynet-package-')))throw Error('Unexpected temporary directory');
   await fs.rm(temporary,{recursive:true,force:true});
 }