Publish first usable Windows release instructions and validation

docs/DEPENDENCY-REVIEW.md

@@ -9,7 +9,8 @@ and native desktop validation remain pending; the broad security gate stays open
 
 Recorded 2026-10-13 against commit `4e60038c2f3b0a7b1d2dd0f4361309a735ee140f`.
 This is an advisory inventory and dependency-path review, not a complete security
-assessment or a cleared production release gate. No dependencies were changed.
+assessment or a cleared production release gate. The initial inventory changed
+no dependencies; the subsequent compatible backport is documented below.
 
 ## Method and reproducible inputs