Command lines show up in process lists and in process-creation audit
logs. --key-hex keeps working for CLIs that pass it.

fix(runtime): read the nsbundle_pack sealing key from NS_BUNDLE_KEY_HEX

digest (SHA-1/256/384/512), HMAC, AES-GCM, PBKDF2 and HKDF, with raw and
jwk import/export for secret keys, backed by CNG (bcrypt). The
implementation is native for both the classic and Node-API engines
(__nsSubtle); crypto.js only forwards each call and wraps the result in
a promise. Unsupported algorithms and operations reject with
NotSupportedError.

A dev boot imports the app graph from the dev server with blocking fetches
on the UI thread. On a cold server that takes seconds and the window stops
responding. In debug builds, until ns:module setDevBootComplete(true), run
the fetches on a helper thread that signals an event when done, while the
UI thread waits in MsgWaitForMultipleObjectsEx and dispatches messages as
they arrive. setDevBootComplete is exposed on ns:module for the classic and
Node-API engines.

fix(runtime): pump messages during HTTP imports until dev boot completes

feat(runtime): crypto.subtle

feat(windows-napi): take Node-API from the modules NAPI_HOST_MODULES names

Adds NSWinRT.win32 to the napi engines (windows-napi and the standalone
runtimes), on the classic engine's libffi Win32 core:

- call/bind/define/import; pointer arguments also take buffers, pointer
  objects and BigInts, and 64-bit results beyond 2^53 are BigInts.
- callback(retType, argTypes, fn): a native function pointer calling fn.
- messageWindow(listener): a hidden window whose messages go to
  listener(msg, wParam, lParam), for tray icons, hotkeys and menus. An
  open window keeps a standalone runtime's event loop running.

feat(napi): Win32 calls, native callbacks and message windows

Ports the linux-runtime Win32 call path. win32_call.rs parses a signature
once into a prepared descriptor and calls through the argument registers
(up to 8 args on the fast API). define() binds every function up front;
bind() locks a function's types in from its first call. Applies to the
classic engine and napi. Adds NSWIN_V8_FLAGS and packages/demo/win32-bench.js.

Brings NSWinRT.win32.callback and NSWinRT.win32.messageWindow to the
classic engine, matching napi. A napi message window created off the UI
thread now delivers to its listener on its own thread.

FinalizationRegistry cleanup, GC finalization and the memory reducer post
foreground tasks to the platform, which the standalone event loop never
ran. The drain hook now pumps the platform after the microtask checkpoint.
Adds packages/test/finalization-check.js.

fix(windows-v8): pump the V8 platform's foreground tasks

perf(win32): prepared call descriptors and register-based dispatch

feat(win32): callbacks and message windows on the classic engine