ci: build Windows .exe artifacts in release + on PR branches

- Add build-windows job to release.yml (matches Linux/macOS jobs)
- Add windows-build.yml that builds hf-mount-nfs.exe and hf-mount.exe
  on push to feat/windows-** and on PRs touching src/Cargo, uploads
  the binaries as a workflow artifact for direct download.

Author: XciD

.github/workflows/release.yml

@@ -224,6 +224,49 @@ jobs:
           name: macos-${{ matrix.arch }}
           path: dist/
 
+  build-windows:
+    name: Build Windows (${{ matrix.arch }})
+    needs: [bump]
+    if: |
+      always() &&
+      (startsWith(github.ref, 'refs/tags/') || needs.bump.result == 'success')
+    runs-on: windows-2022
+    strategy:
+      matrix:
+        include:
+          - arch: x86_64
+            target: x86_64-pc-windows-msvc
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.bump.outputs.new_tag || github.ref }}
+
+      - uses: dtolnay/rust-toolchain@1.95.0
+        with:
+          targets: ${{ matrix.target }}
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: release-${{ matrix.target }}
+
+      - name: Build
+        run: |
+          cargo build --release --target ${{ matrix.target }} --no-default-features --features nfs,vendored-openssl --bin hf-mount-nfs
+          cargo build --release --target ${{ matrix.target }} --no-default-features --features vendored-openssl --bin hf-mount
+
+      - name: Package
+        shell: bash
+        run: |
+          mkdir -p dist
+          for bin in hf-mount-nfs hf-mount; do
+            cp target/${{ matrix.target }}/release/${bin}.exe dist/${bin}-${{ matrix.arch }}-windows.exe
+          done
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: windows-${{ matrix.arch }}
+          path: dist/
+
   # Compute the docker tag base + whether to push :latest. A bumped
   # release wins, then a manually-pushed tag, else fall back to sha-<sha>.
   # `latest` only on stable releases (tag matches `v\d` and has no `-`).
@@ -263,18 +306,19 @@ jobs:
 
   release:
     name: Create Release
-    needs: [bump, build-linux, build-macos]
+    needs: [bump, build-linux, build-macos, build-windows]
     if: |
       always() &&
       needs.build-linux.result == 'success' &&
       needs.build-macos.result == 'success' &&
+      needs.build-windows.result == 'success' &&
       (startsWith(github.ref, 'refs/tags/') || needs.bump.result == 'success')
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/download-artifact@v4
         with:
           path: artifacts
-          pattern: '{linux-*,macos-*}'
+          pattern: '{linux-*,macos-*,windows-*}'
           merge-multiple: true
 
       - name: List artifacts

.github/workflows/windows-build.yml

@@ -0,0 +1,47 @@
+name: Windows Build
+
+on:
+  pull_request:
+    paths:
+      - "src/**"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - ".github/workflows/windows-build.yml"
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build:
+    name: Build hf-mount-nfs.exe
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@1.95.0
+        with:
+          targets: x86_64-pc-windows-msvc
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: windows-build
+
+      - name: Build hf-mount-nfs
+        run: cargo build --release --target x86_64-pc-windows-msvc --no-default-features --features nfs,vendored-openssl --bin hf-mount-nfs
+
+      - name: Build hf-mount
+        run: cargo build --release --target x86_64-pc-windows-msvc --no-default-features --features vendored-openssl --bin hf-mount
+
+      - name: Stage artifacts
+        shell: bash
+        run: |
+          mkdir -p dist
+          cp target/x86_64-pc-windows-msvc/release/hf-mount-nfs.exe dist/
+          cp target/x86_64-pc-windows-msvc/release/hf-mount.exe dist/
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: hf-mount-windows-x86_64
+          path: dist/
+          if-no-files-found: error