chore: initial commit local CI/CD system (e2e verified, production-ready)

Sistema CI locale basato su VMware Workstation + Gitea Actions + act_runner.
Testato e2e con nsis-plugin-nsinnounp (MSBuild + Python, 4 configurazioni parallele).

- scripts/: Invoke-CIJob, Invoke-RemoteBuild, New/Remove-BuildVM, Wait-VMReady, Get-BuildArtifacts
- runner/: act_runner config (windows-build label, capacity 4)
- gitea/workflows/: build-nsis.yml (template per progetti MSBuild/Python)
- template/: script di provisioning template VM (VS BuildTools 2026, .NET SDK 10, Python 3.13)
- docs/: ARCHITECTURE, CI-FLOW, OPTIMIZATION, BEST-PRACTICES, Setup-GiteaSSH

Verificato: e2e-009 SUCCESS in 02:09, cleanup automatico VM confermato.

gitea/workflows/build-nsis.yml

@@ -0,0 +1,46 @@
+# Build (Local CI) — pipeline per nsis-plugin-nsinnounp
+#
+# Eseguito dal runner locale windows-build su WS1-W11.
+# L'orchestratore (Invoke-CIJob.ps1) gira sull'host e:
+#   1. Clona il repo sull'host (con submoduli)
+#   2. Crea una VM efimera da snapshot BaseClean
+#   3. Copia il sorgente nella VM via WinRM (zip transfer)
+#   4. Esegue python build_plugin.py nella VM
+#   5. Raccoglie artifacts.zip sull'host
+#   6. Distrugge la VM
+#
+# Trigger: push su tag v*, oppure run manuale
+
+name: Build (Local CI)
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: windows-build
+
+    steps:
+      - name: Run CI Job
+        shell: pwsh
+        run: |
+          & 'N:\Code\Workspace\Local-CI-CD-System\scripts\Invoke-CIJob.ps1' `
+            -JobId               '${{ github.run_id }}' `
+            -RepoUrl             'ssh://gitea-ci/Simone/nsis-plugin-nsinnounp.git' `
+            -Branch              '${{ github.ref_name }}' `
+            -Commit              '${{ github.sha }}' `
+            -TemplatePath        $env:GITEA_CI_TEMPLATE_PATH `
+            -Submodules `
+            -BuildCommand        'python build_plugin.py --final --dist-dir dist' `
+            -GuestArtifactSource 'dist'
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v3
+        with:
+          name: nsis-plugin-nsinnounp-${{ github.ref_name }}
+          path: F:\CI\Artifacts\${{ github.run_id }}\artifacts.zip
+          if-no-files-found: error