hotfix: repair Windows updater verification in v2.3.1

[Chouwzi]

Production impact

UTHelper v2.3.0 discovers and downloads the update, but Windows package metadata verification fails before the confirmation dialog, leaving the banner on Thử lại.

Fix

• pass the package path safely to Windows PowerShell probes
• isolate native Windows PowerShell modules from inherited PowerShell 7 paths
• suppress stray MSI COM output and preserve scalar product metadata
• allow verified schema 3 Windows/Android handoff while keeping iOS sideload manual
• show explicit progress and retry banner copy
• bump the compatible production hotfix to v2.3.1

Verification

• 1325 passed, 25 skipped
• repository-wide Ruff, compileall, and diff checks pass
• public UTHelper-2.3.0.msi verified live without installation
• coordinator reached ready_to_install without launching before confirmation