chore(sanitize): replace hardcoded user-paths with USER / runtime placeholders

User-detected paths now propagate at install/runtime via shell variables;
day-0 shipped artifacts default to literal USER placeholder where shell
expansion is not available (e.g. inside markdown aggregates).

Files touched:
- MiOS-Build-Scripts.md (4 section headers)
    'C:\Users\Administrator\OneDrive\Documents\GitHub\'
      -> 'C:\Users\USER\OneDrive\Documents\GitHub\'
- tools/fix-token-input.ps1 (DESCRIPTION block 'Run from repo root' hint)
    'cd C:\Users\\MiOS\OneDrive\Documents\GitHub\\MiOS'
      -> 'cd $env:USERPROFILE\OneDrive\Documents\GitHub\MiOS'
    PowerShell resolves $env:USERPROFILE at runtime to the actual user.
- tools/manifest.json
    Regenerated the fix-token-input.ps1 'full_content' entry from the
    updated source so the embedded copy matches.
- tools/Xbox-AutoEnroll.xml, tools/fix-xbox-secureboot.sh
    '/home/ISOs/Win11_25H2_English_x64.iso'
      -> '/var/lib/libvirt/images/Win11_25H2_English_x64.iso'
    Canonical libvirt image pool location; not user-specific.
- tools/system-assess.sh (usage examples in two places)
    '/home/mios/my-assessment.txt'
      -> '~/my-assessment.txt'   (shell expands at runtime)

Residue check after this commit: zero hits across both repos for
'C:\Users\(Administrator|MiOS|admin)' and zero '/home/ISOs/'.
Bootstrap repo was already clean and needs no follow-up.

Author: Kabuki94

MiOS-Build-Scripts.md

@@ -11,7 +11,7 @@ file contents. Use `Ctrl-F` against a path to find a script.
 ## Layer 1 -- User entry points (mios-bootstrap repo)
 
 
-### `C:\Users\Administrator\OneDrive\Documents\GitHub\mios-bootstrap\bootstrap.sh`
+### `C:\Users\USER\OneDrive\Documents\GitHub\mios-bootstrap\bootstrap.sh`
 
 ```bash
 #!/bin/bash
@@ -151,7 +151,7 @@ fi
 ```
 
 
-### `C:\Users\Administrator\OneDrive\Documents\GitHub\mios-bootstrap\bootstrap.ps1`
+### `C:\Users\USER\OneDrive\Documents\GitHub\mios-bootstrap\bootstrap.ps1`
 
 ```powershell
 #Requires -Version 5.1
@@ -178,7 +178,7 @@ if (Test-Path $installScript) {
 ```
 
 
-### `C:\Users\Administrator\OneDrive\Documents\GitHub\mios-bootstrap\install.sh`
+### `C:\Users\USER\OneDrive\Documents\GitHub\mios-bootstrap\install.sh`
 
 ```bash
 #!/usr/bin/env bash
@@ -896,7 +896,7 @@ main "$@"
 ```
 
 
-### `C:\Users\Administrator\OneDrive\Documents\GitHub\mios-bootstrap\install.ps1`
+### `C:\Users\USER\OneDrive\Documents\GitHub\mios-bootstrap\install.ps1`
 
 ```powershell
 #Requires -Version 5.1

tools/Xbox-AutoEnroll.xml

@@ -77,7 +77,7 @@
     <emulator>/usr/bin/qemu-system-x86_64</emulator>
     <disk type="file" device="cdrom">
       <driver name="qemu" type="raw"/>
-      <source file="/home/ISOs/Win11_25H2_English_x64.iso"/>
+      <source file="/var/lib/libvirt/images/Win11_25H2_English_x64.iso"/>
       <target dev="sda" bus="sata"/>
       <readonly/>
       <address type="drive" controller="0" bus="0" target="0" unit="0"/>

tools/fix-token-input.ps1

@@ -5,7 +5,7 @@
     Replace with Read-Host -MaskInput (PS 7.1+, handles paste natively).
 
     Run from repo root:
-      cd C:\Users\\MiOS\OneDrive\Documents\GitHub\\MiOS
+      cd $env:USERPROFILE\OneDrive\Documents\GitHub\MiOS   # or wherever the repo is
       .\fix-token-input.ps1
 #>
 $ErrorActionPreference = "Stop"

tools/fix-xbox-secureboot.sh

@@ -192,7 +192,7 @@ cat > /tmp/Xbox-fixed.xml << 'XMLEOF'
     <emulator>/usr/bin/qemu-system-x86_64</emulator>
     <disk type="file" device="cdrom">
       <driver name="qemu" type="raw"/>
-      <source file="/home/ISOs/Win11_25H2_English_x64.iso"/>
+      <source file="/var/lib/libvirt/images/Win11_25H2_English_x64.iso"/>
       <target dev="sda" bus="sata"/>
       <readonly/>
       <address type="drive" controller="0" bus="0" target="0" unit="0"/>