fix(windows): use Podman host gateway resolution

[lefoulkrod]

What changed

• rely on Podman/gvproxy for host.containers.internal instead of installing an incorrect Windows gateway override
• split routine product-feature and clean onboarding VM tiers
• stage the CLI once as a compressed, verified candidate bundle
• stabilize Windows elevation, reboot/resume, TUI input, and matrix interruption cleanup
• document the fast daily and full onboarding regression commands

How it was tested

• python3 -m unittest discover -s tests/e2e -p 'test_*.py'
• go test ./... in the pinned CLI builder image
• CLI product and onboarding regression across AppImage, DEB, RPM, and Windows
• native macOS ARM64 CLI portable, attended TUI, and unattended lifecycle regression

Release note

release-notes.d/windows-container-host-routing.md

Release and security check

• I considered whether this changes permissions, downloaded software, executed commands, dependencies, configuration files, or release artifacts.
• No new or updated dependencies are introduced.
• User-facing documentation and tests were updated where needed.