Stage and require verified extraction helper in Windows release packages

tools/package_windows.py

@@ -14,6 +14,7 @@ import stat
 import tempfile
 import zipfile
 from embeddinggemma2.runtime_provenance import verify as verify_provenance
+from stage_extraction_worker import verify as verify_extraction
 
 ROOT = Path(__file__).resolve().parents[1]
 CRT_LIBRARIES = {"concrt140.dll", "msvcp140.dll", "msvcp140_1.dll", "msvcp140_2.dll", "msvcp140_atomic_wait.dll", "msvcp140_codecvt_ids.dll", "vccorlib140.dll", "vcruntime140.dll", "vcruntime140_1.dll", "vcruntime140_threads.dll"}
@@ -146,6 +147,7 @@ def package(root, executable, output, cli=None):
             raise ValueError(f"Runtime size mismatch: {name}")
     media = media_provenance(root, resources, architecture)
     expected.update(media)
+    expected.update(verify_extraction(resources, root, "windows", architecture))
     selected = [(executable, "searchi.exe"), (root / "LICENSE", "LICENSE.txt")]
     if cli is not None:
         if cli.is_symlink() or not cli.is_file() or not 0 < cli.stat().st_size <= MAX_MEMBER: