feat(sprint3): Invoke-VmrunBounded, Get-GuestIPAddress, transport and concurrency hardening

H4: Invoke-VmrunBounded added to _Common.psm1 (Start-Process + Wait-Process + taskkill on
    timeout, returns {ExitCode;Output;TimedOut;ElapsedSeconds}). Wired in Invoke-CIJob.ps1
    for vmrun start (180s) and Remove-BuildVM.ps1 for stop/deleteVM (60s/90s).
H5: Cleanup-OrphanedBuildVMs.ps1 removes stale vm-start.lock (>30 min). ValidateRange
    lowered to 0 to allow emergency -MaxAgeHours 0. Invoke-RetentionPolicy.ps1 same.
H8: _Transport.psm1 SSH hardening: StrictHostKeyChecking=accept-new, F:\CI\State\known_hosts.
H9: Validate-DeployState.ps1 Linux branch added: checks ci-report-ip.service enabled,
    ci-report-ip.sh executable via SSH. New params: -GuestOS, -SshKeyPath, -SshUser.
H12: Get-GuestIPAddress extracted into _Common.psm1 (guestinfo.ci-ip primary, getGuestIPAddress
     fallback). Invoke-CIJob.ps1 Phase 3b replaced with single call. Measure-CIBenchmark.ps1
     updated to match.
Also: _Common.psm1 adds Write-CIRedactedCommand and ConvertTo-SafeShellSingleQuotedString.
     Pester suite updated: 30/30 pass.

scripts/Remove-BuildVM.ps1

@@ -39,6 +39,8 @@ param(
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Continue'   # Don't stop on errors — always try next step
 
+Import-Module (Join-Path $PSScriptRoot '_Common.psm1') -Force
+
 $cloneDir = Split-Path $VMPath -Parent
 
 Write-Host "[Remove-BuildVM] Destroying VM: $VMPath"
@@ -56,24 +58,23 @@ if (-not (Test-Path $VMPath -PathType Leaf)) {
 if (-not $PSCmdlet.ShouldProcess($VMPath, 'Stop and delete build VM')) { return }
 
 # ── Step 2: Graceful stop ─────────────────────────────────────────────────────
-Write-Host "[Remove-BuildVM] Sending soft stop..."
-& $VmrunPath -T ws stop $VMPath soft 2>&1 | Out-Null
-
-$deadline = (Get-Date).AddSeconds($GracefulTimeoutSeconds)
-while ((Get-Date) -lt $deadline) {
-    Start-Sleep -Seconds 2
-    $stateOutput = & $VmrunPath -T ws getState $VMPath 2>&1
-    if ($stateOutput -notmatch 'running') {
-        Write-Host "[Remove-BuildVM] VM stopped gracefully."
-        break
-    }
+Write-Host "[Remove-BuildVM] Sending soft stop (timeout: ${GracefulTimeoutSeconds}s)..."
+$stopSoft = Invoke-VmrunBounded -VmrunPath $VmrunPath `
+                -Operation stop -Arguments @($VMPath, 'soft') -TimeoutSeconds $GracefulTimeoutSeconds
+if ($stopSoft.TimedOut) {
+    Write-Warning "[Remove-BuildVM] Soft stop timed out after ${GracefulTimeoutSeconds}s."
+} elseif ($stopSoft.ExitCode -eq 0) {
+    Write-Host "[Remove-BuildVM] VM stopped gracefully."
 }
 
 # ── Step 3: Force stop if still running ──────────────────────────────────────
-$stateOutput = & $VmrunPath -T ws getState $VMPath 2>&1
-if ($stateOutput -match 'running') {
-    Write-Host "[Remove-BuildVM] Graceful stop timed out — forcing hard stop..."
-    & $VmrunPath -T ws stop $VMPath hard 2>&1 | Out-Null
+if ($stopSoft.TimedOut -or $stopSoft.ExitCode -ne 0) {
+    Write-Host "[Remove-BuildVM] Graceful stop did not succeed — forcing hard stop..."
+    $stopHard = Invoke-VmrunBounded -VmrunPath $VmrunPath `
+                    -Operation stop -Arguments @($VMPath, 'hard') -TimeoutSeconds 60
+    if ($stopHard.TimedOut) {
+        Write-Warning "[Remove-BuildVM] Hard stop timed out after 60s."
+    }
 }
 
 # Poll vmrun list until VMX is gone — vmware-vmx.exe may hold file locks briefly
@@ -98,8 +99,14 @@ foreach ($delay in @(0, 3, 6)) {
         Write-Host "[Remove-BuildVM] Retrying deleteVM in ${delay}s..."
         Start-Sleep -Seconds $delay
     }
-    $deleteOutput = & $VmrunPath -T ws deleteVM $VMPath 2>&1
-    $deleteExit   = $LASTEXITCODE
+    $delResult    = Invoke-VmrunBounded -VmrunPath $VmrunPath `
+                        -Operation deleteVM -Arguments @($VMPath) -TimeoutSeconds 90
+    $deleteOutput = $delResult.Output
+    $deleteExit   = $delResult.ExitCode
+    if ($delResult.TimedOut) {
+        Write-Warning "[Remove-BuildVM] deleteVM timed out after 90s."
+        $deleteExit = -1
+    }
     if ($deleteExit -eq 0) { break }
 }