d4099b94fd
Setup-TemplateVM.ps1: - Added Assert-Step validation after each install step (WinRM, Firewall, User, UAC, Defender, .NET, Python, VS Build Tools, Toolchain, Cleanup) - Final pre-snapshot gate: all checks must pass before snapshot is allowed - Disabled Windows Defender + Firewall before installs (saves 5-15 min) - Disabled UAC (EnableLUA=0, LocalAccountTokenFilterPolicy=1) Prepare-TemplateSetup.ps1: - Pre-flight checks: IP validation, TCP/5985 reachability, script presence - Host WinRM: AllowUnencrypted, TrustedHosts config - Guest prep: C:\CI exists, file copied, size match - Post-setup remote validation (9 checks): WinRM, user+admin, UAC, firewall, .NET, Python, MSBuild, CI dirs - StoreCredential flow: New-StoredCredential for BuildVMGuest target