Seed2Action Windows Desktop Connector (On-Demand Silent Daemon)

Architecture:
- Native Git transport: Fetch, pull, push operate natively via SSH or HTTPS.
- Desktop verification: Background daemon binds strictly to 127.0.0.1:43127 (loopback only).
- Zero recurring polling: Sits idle until attestation or status is requested by the dashboard.
- Automatic idle: Returns to idle after 5 minutes of inactivity. Zero console popups, zero background CPU cycles.

Security Guarantees:
- Canonical boundary: D:\Main-Repository-V2\Main-Repository-V2 strictly enforced. Traversal paths (..) rejected.
- Safe Diff Viewer: Intercepts and withholds .env* files and private keys. Redacts API tokens, bearer tokens, passwords.
- Multi-Branch Intelligence: Discovers all branches and sync status without switching the active checked-out branch.
- Cryptographic Attestation: HMAC-SHA256 signed envelope with single-use challenge nonce.
- Fail-Closed Behavior: Offline, wrong repository, or failed attestation fails closed.

Installation:
Run Install-Seed2ActionConnector.ps1 from Windows PowerShell.
Registers a single logon task that launches Seed2ActionDaemonLauncher.vbs silently.
