feat(vsock): integrate Windows TSI proxies into muxer

Wire Windows TSI proxy instantiation into vsock muxer:

muxer.rs changes:
- Conditional imports: Unix uses TsiStreamProxy/TsiDgramProxy
- Windows uses TsiStreamProxyWindowsWrapper/TsiDgramProxyWindowsWrapper
- RawFd gated to non-Windows (added RawFdType alias)
- SOCK_STREAM proxy creation: dispatch to Windows wrapper on Windows
- SOCK_DGRAM proxy creation: dispatch to Windows wrapper on Windows

Complete TSI Windows implementation now integrated:
- Phase 1-4: Low-level abstractions (socket, stream, dgram, pipe)
- Phase 5: Proxy trait wrappers + muxer integration
- Total: ~2,100 lines of Windows TSI code

TSI on Windows now supports:
- TCP connections (AF_INET/AF_INET6)
- UDP datagrams (AF_INET/AF_INET6)
- Named Pipes (AF_UNIX equivalent)
- Credit-based flow control
- Event-driven I/O

Next: End-to-end testing with guest VM.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hikejs

src/devices/src/virtio/vsock/muxer.rs

@@ -1,4 +1,5 @@
 use std::collections::HashMap;
+#[cfg(not(target_os = "windows"))]
 use std::os::unix::io::RawFd;
 use std::path::PathBuf;
 use std::sync::{Arc, Mutex, RwLock};
@@ -13,8 +14,14 @@ use super::proxy::{Proxy, ProxyRemoval, ProxyUpdate};
 use super::reaper::ReaperThread;
 #[cfg(target_os = "macos")]
 use super::timesync::TimesyncThread;
+#[cfg(not(target_os = "windows"))]
 use super::tsi_dgram::TsiDgramProxy;
+#[cfg(not(target_os = "windows"))]
 use super::tsi_stream::TsiStreamProxy;
+#[cfg(target_os = "windows")]
+use super::tsi_dgram_windows::TsiDgramProxyWindowsWrapper;
+#[cfg(target_os = "windows")]
+use super::tsi_stream_windows::TsiStreamProxyWindowsWrapper;
 use super::unix::UnixProxy;
 use super::TsiFlags;
 use super::VsockError;
@@ -27,6 +34,11 @@ use std::net::{Ipv4Addr, SocketAddrV4};
 
 pub type ProxyMap = Arc<RwLock<HashMap<u64, Mutex<Box<dyn Proxy>>>>>;
 
+#[cfg(not(target_os = "windows"))]
+pub type RawFdType = RawFd;
+#[cfg(target_os = "windows")]
+pub type RawFdType = i32;
+
 /// A muxer RX queue item.
 #[derive(Debug)]
 pub enum MuxerRx {
@@ -295,7 +307,20 @@ impl VsockMuxer {
                         warn!("rejecting stream inet proxy because HIJACK_INET is disabled");
                         return;
                     }
-                    match TsiStreamProxy::new(
+                    #[cfg(not(target_os = "windows"))]
+                    let proxy_result = TsiStreamProxy::new(
+                        id,
+                        self.cid,
+                        req.family,
+                        defs::TSI_PROXY_PORT,
+                        req.peer_port,
+                        pkt.src_port(),
+                        mem.clone(),
+                        queue.clone(),
+                        self.rxq.clone(),
+                    );
+                    #[cfg(target_os = "windows")]
+                    let proxy_result = TsiStreamProxyWindowsWrapper::new(
                         id,
                         self.cid,
                         req.family,
@@ -305,7 +330,8 @@ impl VsockMuxer {
                         mem.clone(),
                         queue.clone(),
                         self.rxq.clone(),
-                    ) {
+                    );
+                    match proxy_result {
                         Ok(proxy) => {
                             self.proxy_map
                                 .write()
@@ -330,15 +356,29 @@ impl VsockMuxer {
                         warn!("rejecting dgram inet proxy because HIJACK_INET is disabled");
                         return;
                     }
-                    match TsiDgramProxy::new(
+                    #[cfg(not(target_os = "windows"))]
+                    let proxy_result = TsiDgramProxy::new(
                         id,
                         self.cid,
                         req.family,
                         req.peer_port,
                         mem.clone(),
                         queue.clone(),
                         self.rxq.clone(),
-                    ) {
+                    );
+                    #[cfg(target_os = "windows")]
+                    let proxy_result = TsiDgramProxyWindowsWrapper::new(
+                        id,
+                        self.cid,
+                        req.family,
+                        defs::TSI_PROXY_PORT,
+                        req.peer_port,
+                        pkt.src_port(),
+                        mem.clone(),
+                        queue.clone(),
+                        self.rxq.clone(),
+                    );
+                    match proxy_result {
                         Ok(proxy) => {
                             self.proxy_map
                                 .write()