Merge branch 'test/win-pro-integration' into main

Windows Pro integration + the Windows GPU fix:

- Vault, Clipboard and Replay live on Windows (core shell + wiring; the pro-side
  code lands in desktop-pro's matching merge).
- Windows GPU offload restored: the bundled Vulkan engine died at startup with
  vk::PhysicalDevice::createDevice: ErrorExtensionNotPresent, so every launch
  silently fell back to the CPU engine. Fixed by setting ggml-vulkan's own
  GGML_VK_DISABLE_BFLOAT16 opt-out in the Windows engine spawn env. macOS env
  composition is byte-identical, asserted by test.
- System Health now names a GPU driver extension gap instead of showing a blank
  'server is not running'.
- A failed engine LAUNCH is no longer treated as a crash, so a fast-failing
  engine can no longer halve and persist the user's ctxSize.
- release.yml / windows-build.yml take a pro_ref input, so a release can pair a
  core ref with a matching desktop-pro ref instead of silently bundling pro main.

Pairs with desktop-pro 169ccb6 - core's Pro shell references that code, so the
two land together.

Verified: tsc (node + web) clean, 3158 unit tests pass, coverage above the
ratchet floor. NOT yet verified: GPU offload through a packaged app on real
Windows hardware - that is what the next beta is for.

Author: Anurag-Wednesday

.github/workflows/release.yml

@@ -13,6 +13,16 @@ on:
         type: choice
         options: [beta, stable]
         default: beta
+      pro_ref:
+        # The pro checkout used to default to desktop-pro's DEFAULT branch with no ref,
+        # which silently pairs a core feature/integration branch with pro `main`. The
+        # build stays green and every pro-side change is simply absent — the failure mode
+        # this input exists to prevent. Leave empty for main; set it to the matching pro
+        # branch when releasing from a core integration branch.
+        description: 'desktop-pro branch/tag/sha to bundle (empty = its default branch)'
+        type: string
+        required: false
+        default: ''
 
 permissions:
   contents: write
@@ -165,6 +175,11 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: off-grid-ai/desktop-pro
+          # Empty = desktop-pro's default branch (checkout treats '' as unset), so the
+          # normal main-line release is unchanged. Set pro_ref when the core ref is an
+          # integration branch, or the build bundles pro `main` and every pro-side change
+          # goes missing with a green build.
+          ref: ${{ inputs.pro_ref }}
           token: ${{ secrets.PRO_REPO_TOKEN }}
           path: pro
           fetch-depth: 1
@@ -356,6 +371,7 @@ jobs:
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           repository: off-grid-ai/desktop-pro
+          ref: ${{ inputs.pro_ref }} # same pro ref as build-mac — one version, one pro tree
           token: ${{ secrets.PRO_REPO_TOKEN }}
           path: pro
           fetch-depth: 1

.github/workflows/windows-build.yml

@@ -11,6 +11,15 @@ on:
     branches:
       - feat/windows-support
   workflow_dispatch: # lets you trigger a build manually from the Actions tab
+    inputs:
+      pro_ref:
+        # Without this the pro checkout below takes desktop-pro's DEFAULT branch, so
+        # dispatching from a core integration branch quietly builds against pro `main`
+        # and every pro-side change is absent from a green build.
+        description: 'desktop-pro branch/tag/sha to bundle (empty = its default branch)'
+        type: string
+        required: false
+        default: ''
 
 permissions:
   contents: read
@@ -44,6 +53,9 @@ jobs:
         if: env.HAS_PRO_TOKEN == 'true'
         with:
           repository: off-grid-ai/desktop-pro
+          # Empty = default branch (checkout treats '' as unset), so the push-triggered
+          # build is unchanged; set it on dispatch to pair with a core integration branch.
+          ref: ${{ inputs.pro_ref }}
           token: ${{ secrets.PRO_REPO_TOKEN }}
           path: pro
           fetch-depth: 1