ci: optimize Windows CI speed with Dev Drive and Defender disable

1. ci.yml: Upgrade Windows Test and CLI E2E jobs from Defender-only to
   Dev Drive (ReFS) — same approach used by oxc and rolldown. ReFS Dev
   Drives bypass Defender scanning automatically and reduce NTFS metadata
   overhead. Expected: faster cargo cache restore, cargo build, and test.

2. e2e-test.yml: Add Defender disable to Windows build job and e2e-test
   jobs which previously had no Windows I/O optimization at all.
   The build job took ~4min 18s on Windows vs ~1min 57s on Ubuntu.

References:
- oxc: https://github.com/oxc-project/oxc (uses setup-dev-drive)
- rolldown: https://github.com/rolldown/rolldown (uses setup-dev-drive)
- setup-dev-drive: https://github.com/samypr100/setup-dev-drive

Author: fengmk2

.github/workflows/ci.yml

@@ -70,11 +70,17 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./.github/actions/clone
 
-      # Disable Windows Defender real-time scanning to speed up I/O-heavy builds (~30-50% faster)
-      - name: Disable Windows Defender
+      # Use Dev Drive with ReFS on Windows for faster I/O (bypasses Defender scanning automatically)
+      - name: Setup Dev Drive
+        uses: samypr100/setup-dev-drive@30f0f98ae5636b2b6501e181dfb3631b9974818d # v4.0.0
         if: runner.os == 'Windows'
-        shell: powershell
-        run: Set-MpPreference -DisableRealtimeMonitoring $true
+        with:
+          workspace-copy: true
+          drive-size: 12GB
+          drive-format: ReFS
+          env-mapping: |
+            CARGO_HOME,{{ DEV_DRIVE }}/.cargo
+            RUSTUP_HOME,{{ DEV_DRIVE }}/.rustup
 
       - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.0
         with:
@@ -192,11 +198,17 @@ jobs:
       - name: Configure Git for access to vite-task
         run: git config --global url."https://x-access-token:${{ secrets.VITE_TASK_TOKEN }}@github.com/".insteadOf "ssh://git@github.com/"
 
-      # Disable Windows Defender real-time scanning to speed up I/O-heavy builds (~30-50% faster)
-      - name: Disable Windows Defender
+      # Use Dev Drive with ReFS on Windows for faster I/O (bypasses Defender scanning automatically)
+      - name: Setup Dev Drive
+        uses: samypr100/setup-dev-drive@30f0f98ae5636b2b6501e181dfb3631b9974818d # v4.0.0
         if: runner.os == 'Windows'
-        shell: powershell
-        run: Set-MpPreference -DisableRealtimeMonitoring $true
+        with:
+          workspace-copy: true
+          drive-size: 12GB
+          drive-format: ReFS
+          env-mapping: |
+            CARGO_HOME,{{ DEV_DRIVE }}/.cargo
+            RUSTUP_HOME,{{ DEV_DRIVE }}/.rustup
 
       - run: |
           brew install rustup

.github/workflows/e2e-test.yml

@@ -83,6 +83,12 @@ jobs:
       - name: Configure Git for access to vite-task
         run: git config --global url."https://x-access-token:${{ secrets.VITE_TASK_TOKEN }}@github.com/".insteadOf "ssh://git@github.com/"
 
+      # Disable Windows Defender real-time scanning to speed up I/O-heavy builds (~30-50% faster)
+      - name: Disable Windows Defender
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: Set-MpPreference -DisableRealtimeMonitoring $true
+
       - uses: oxc-project/setup-rust@d286d43bc1f606abbd98096666ff8be68c8d5f57 # v1.0.0
         with:
           save-cache: ${{ github.ref_name == 'main' }}
@@ -258,6 +264,12 @@ jobs:
         with:
           ecosystem-ci-project: ${{ matrix.project.name }}
 
+      # Disable Windows Defender real-time scanning to speed up I/O-heavy operations
+      - name: Disable Windows Defender
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: Set-MpPreference -DisableRealtimeMonitoring $true
+
       - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5
         with:
           node-version: ${{ matrix.project.node-version }}