fix: use bash shell for Windows template extraction

Use Git Bash (available on all Windows runners) for the zip download
and extraction. Git Bash's unzip may handle NTFS-illegal characters
differently than Python's os.makedirs through MSYS2's path translation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: JonZeolla

.github/workflows/ci.yml

@@ -119,7 +119,7 @@ jobs:
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Generate project from template
-        shell: pwsh
+        shell: bash
         env:
           RUN_POST_HOOK: 'true'
           SKIP_GIT_PUSH: 'true'
@@ -128,35 +128,17 @@ jobs:
           git config --global user.name "CI Automation"
           git config --global user.email "ci@zenable.io"
 
-          # The template directory name contains double-quote characters which
-          # are fundamentally illegal on NTFS. Download the zip and extract with
-          # Python, replacing " with ' in paths during extraction. This is safe
-          # because Jinja2 treats single and double quotes identically, so
-          # replace(" ", "") and replace(' ', '') produce the same output.
-          $zipUrl = "https://github.com/${{ github.repository }}/archive/$env:TEMPLATE_REF.zip"
-          $zipPath = Join-Path $env:RUNNER_TEMP "template.zip"
-          $extractDir = Join-Path $env:RUNNER_TEMP "template-src"
-          Invoke-WebRequest -Uri $zipUrl -OutFile $zipPath
-
-          python -c @"
-          import zipfile, os, sys
-          zf = zipfile.ZipFile(sys.argv[1])
-          dest = sys.argv[2]
-          for info in zf.infolist():
-              name = info.filename
-              if os.name == 'nt':
-                  name = name.replace(chr(34), chr(39))
-              target = os.path.join(dest, name.replace('/', os.sep).rstrip(os.sep))
-              if info.is_dir():
-                  os.makedirs(target, exist_ok=True)
-              else:
-                  os.makedirs(os.path.dirname(target), exist_ok=True)
-                  with zf.open(info) as src, open(target, 'wb') as dst:
-                      dst.write(src.read())
-          print(os.path.join(dest, os.listdir(dest)[0]))
-          "@ $zipPath $extractDir | Set-Variable templateDir
+          # The cookiecutter template directory name contains characters that
+          # are illegal on NTFS (double quotes, pipe). Use Git Bash (available
+          # on all Windows runners) which operates on a POSIX compatibility
+          # layer where these characters are valid.
+          zipUrl="https://github.com/${{ github.repository }}/archive/${TEMPLATE_REF}.zip"
+          tmpdir=$(mktemp -d)
+          curl -fsSL "$zipUrl" -o "$tmpdir/template.zip"
+          unzip -q "$tmpdir/template.zip" -d "$tmpdir/src"
+          templateDir="$tmpdir/src/$(ls "$tmpdir/src")"
 
-          uvx --with gitpython cookiecutter $templateDir.Trim() --no-input --output-dir "$env:RUNNER_TEMP"
+          uvx --with gitpython cookiecutter "$templateDir" --no-input --output-dir "$RUNNER_TEMP"
       - name: Verify generated project
         shell: pwsh
         run: |