feat(sprint4-6): quality, reliability, perf baseline

Sprint 4 — qualità codice:
- scripts/_Common.psm1: New-CISessionOption, Resolve-VmrunPath, Invoke-Vmrun
- PSScriptAnalyzerSettings.psd1: project-wide PSSA rules (security + formatting)
- Remove-BuildVM.ps1: SupportsShouldProcess (-WhatIf support)
- Invoke-RemoteBuild.ps1, Get-BuildArtifacts.ps1: use New-CISessionOption from module
- New-BuildVM.ps1: use Resolve-VmrunPath + Invoke-Vmrun from module

Sprint 5 — affidabilità:
- Backup-CITemplate.ps1: stop runner, timestamped VMDK backup, prune old, restart
- Watch-RunnerHealth.ps1: auto-restart act_runner, cooldown 3/h, EventLog + webhook
- Register-CIScheduledTasks.ps1: add CI-RunnerHealth task (every 15 min)

Sprint 6 — perf baseline:
- Set-TemplateSharedFolders.ps1: idempotent VMX editor for NuGet/pip shared folders
- Invoke-RemoteBuild.ps1: -UseSharedCache injects NUGET_PACKAGES + PIP_CACHE_DIR in guest
- Measure-CIBenchmark.ps1: times clone/start/IP/WinRM/destroy, appends to benchmark.jsonl

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/Invoke-RemoteBuild.ps1

@@ -73,14 +73,21 @@ param(
 
     [string] $GuestWorkDir = 'C:\CI\build',
 
-    [string] $GuestArtifactZip = 'C:\CI\output\artifacts.zip'
+    [string] $GuestArtifactZip = 'C:\CI\output\artifacts.zip',
+
+    # Redirect dotnet NuGet package store and pip download cache to VMware shared
+    # folders on the host (F:\CI\Cache\NuGet and F:\CI\Cache\pip).
+    # Requires the template VMX to have been configured by Set-TemplateSharedFolders.ps1
+    # and VMware Tools HGFS driver present in the guest.
+    [switch] $UseSharedCache
 )
 
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
 
-# ── Session options: skip SSL certificate checks for self-signed (lab use) ──
-$sessionOptions = New-PSSessionOption -SkipCACheck -SkipCNCheck -SkipRevocationCheck
+Import-Module (Join-Path $PSScriptRoot '_Common.psm1') -Force
+
+$sessionOptions = New-CISessionOption
 
 Write-Host "[Invoke-RemoteBuild] Connecting to VM at $IPAddress..."
 
@@ -134,9 +141,12 @@ try {
         # ── Custom build command (e.g. python, msbuild, cmake…) ──────────
         Write-Host "[Invoke-RemoteBuild] Running build command: $BuildCommand"
         $buildExit = Invoke-Command -Session $session -ScriptBlock {
-            param($workDir, $cmd, $artifactZip, $artifactSrc)
+            param($workDir, $cmd, $artifactZip, $artifactSrc, $useCache)
             # Unbuffered Python output — lines appear in real-time instead of being held in buffer
             $env:PYTHONUNBUFFERED = '1'
+            if ($useCache) {
+                $env:PIP_CACHE_DIR = '\\vmware-host\Shared Folders\pip-cache'
+            }
             Set-Location $workDir
             # Stream each output line via Write-Host — WinRM forwards Write-Host in real-time
             & cmd /c "$cmd 2>&1" | ForEach-Object { Write-Host $_ }
@@ -152,7 +162,7 @@ try {
             }
 
             return $exit
-        } -ArgumentList $GuestWorkDir, $BuildCommand, $GuestArtifactZip, $GuestArtifactSource
+        } -ArgumentList $GuestWorkDir, $BuildCommand, $GuestArtifactZip, $GuestArtifactSource, $UseSharedCache.IsPresent
 
         if ($buildExit -ne 0) {
             throw "Build command failed (exit $buildExit)"
@@ -162,11 +172,14 @@ try {
         # ── Default: dotnet restore + dotnet build ────────────────────────
         Write-Host "[Invoke-RemoteBuild] Running dotnet restore..."
         $restoreExit = Invoke-Command -Session $session -ScriptBlock {
-            param($workDir)
+            param($workDir, $useCache)
+            if ($useCache) {
+                $env:NUGET_PACKAGES = '\\vmware-host\Shared Folders\nuget-cache'
+            }
             Set-Location $workDir
             dotnet restore 2>&1 | ForEach-Object { Write-Host $_ }
             return $LASTEXITCODE
-        } -ArgumentList $GuestWorkDir
+        } -ArgumentList $GuestWorkDir, $UseSharedCache.IsPresent
 
         if ($restoreExit -ne 0) {
             throw "dotnet restore failed (exit $restoreExit)"
@@ -174,7 +187,10 @@ try {
 
         Write-Host "[Invoke-RemoteBuild] Running dotnet build (configuration: $Configuration)..."
         $buildExit = Invoke-Command -Session $session -ScriptBlock {
-            param($workDir, $config, $artifactZip)
+            param($workDir, $config, $artifactZip, $useCache)
+            if ($useCache) {
+                $env:NUGET_PACKAGES = '\\vmware-host\Shared Folders\nuget-cache'
+            }
             Set-Location $workDir
             $outputDir = Join-Path $workDir 'bin\CIOutput'
             dotnet build --configuration $config --output $outputDir 2>&1 | ForEach-Object { Write-Host $_ }
@@ -189,7 +205,7 @@ try {
             }
 
             return $exit
-        } -ArgumentList $GuestWorkDir, $Configuration, $GuestArtifactZip
+        } -ArgumentList $GuestWorkDir, $Configuration, $GuestArtifactZip, $UseSharedCache.IsPresent
 
         if ($buildExit -ne 0) {
             throw "dotnet build failed (exit $buildExit)"