ci(lint): update PSScriptAnalyzer settings and suppress warnings for plain-text passwords in templates

template/Prepare-WinBuild2025.ps1

@@ -113,6 +113,8 @@
         -VMXPath 'F:\CI\Templates\WinBuild\WinBuild.vmx' -VMIPAddress 192.168.79.130 `
         -BuildPassword 'StrongCIPass!2026' -StoreCredential
 #>
+[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '',
+    Justification = 'Template setup script: plain-text password from CI credential store converted to SecureString for WinRM PSCredential. Intentional by design.')]
 [CmdletBinding()]
 param(
     # Path to the VM .vmx — enables auto power-on + IP detection + auto snapshot.
@@ -721,5 +723,5 @@ finally {
     }
     Write-Host "[Prepare] Host TrustedHosts restored."
 }
-
-
+
+