21681e7419
Reproduces the orchestrator WinRM readiness probe as SYSTEM (the act_runner account) and surfaces the real error the silent is_ready() swallows: TCP reachability, guest hostname from the TLS cert CN, and an auth x username-form matrix, with a classified fix recommendation. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>