…available for PMC publish flow (#27653)

Co-authored-by: Anam Navied <anam.naviyou@gmail.com>

…ing the git tag (#27652)

Co-authored-by: Justin Chung <124807742+jshigetomi@users.noreply.github.com>
Co-authored-by: Justin Chung <chungjustin@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

…r Wix (#27666)

Co-authored-by: Aditya Patwardhan <adityap@microsoft.com>

Backport of [PowerShell-MSRC PR 167](https://github.com/azure-core-compute/PowerShell-MSRC/pull/167) to `release/v7.6.4`.

## Scope
- Cherry-picked the two implementation commits from the approved private PR.
- Excluded the unrelated debugger-test timeout commit because that test is absent from the target release branch.
- Changes one implementation file only.

## Validation
- Source PR CI, CodeQL, and Advanced Security checks passed.
- `Start-PSBuild -Configuration Release -SMAOnly -Runtime fxdependent-win-desktop -UseNuGetOrg` passed on the backport.
- Targeted path-validation checks passed against the built assembly.

## Confidentiality
This branch and PR must remain in `mscodehub`. Do not mirror or push these commits or this branch to GitHub before coordinated disclosure.

----
#### AI description  (iteration 1)
#### PR Classification
Security bug fix addressing path traversal vulnerabilities in CAB file extraction.

#### PR Summary
This PR applies a private servicing fix to prevent path traversal attacks during CAB file extraction by validating that extracted files remain within the intended help directory.

- `CabinetNativeApi.cs`: Added `ValidateExtractionPath()` method to reject rooted paths, UNC paths, paths with colons (blocking Alternate Data Streams), and paths that resolve outside the intended directory
- `CabinetNativeApi.cs`: Modified `FdintCOPY_FILE` and `FdintCLOSE_FILE_INFO` notification handlers to validate extraction paths and wrap operations in try-catch blocks to safely reject malicious CAB entries
- `CabinetNativeApi.cs`: Enhanced error handling to return appropriate failure codes when path validation or file operations fail
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->


Related work items: #164396

Backports the build fixes from mscodehub PRs 40633 and 40638 to `release/v7.6.4`.

## Scope
- Replays PR 40633's prerequisite chain: PR 40625, PR 40632, then PR 40633.
- Cherry-picks the current source commit from PR 40638 (`f507709e175428305a9bd17d816c0a1ab9b40c28`).
- Changes only `tools/wix/wix.psm1` and `tools/packaging/packaging.psm1`.

## Changes
- Ensures Microsoft.PowerShell.PSResourceGet 1.2.0 or newer is available, installing it from an explicitly registered PowerShell CFS v2 feed when necessary.
- Adds `-sval` to the WiX `light.exe` invocation to skip ICE validation in CI.

## Source PRs
- [40625](https://dev.azure.com/mscodehub/PowerShellCore/_git/PowerShell/pullrequest/40625)
- [40632](https://dev.azure.com/mscodehub/PowerShellCore/_git/PowerShell/pullrequest/40632)
- [40633](https://dev.azure.com/mscodehub/PowerShellCore/_git/PowerShell/pullrequest/40633)
- [40638](https://dev.azure.com/mscodehub/PowerShellCore/_git/PowerShell/pullrequest/40638)

## Validation
- Each backport commit has the same stable patch ID as its source commit.
- Both changed PowerShell modules parse without errors.
- The branch diff passes `git diff --check`.

## Repository boundary
This branch and PR must remain in `mscodehub`; do not mirror or push this branch to GitHub before the PowerShell 7.6.4 release.

----
#### AI description  (iteration 1)
#### PR Classification
Bug fixes for Windows build pipeline to resolve WiX tooling installation and MSI build validation issues.

#### PR Summary
This pull request addresses critical issues in the Windows build pipeline by fixing the WiX module installation process and MSI build validation. The changes ensure proper version checking for PSResourceGet module and suppress schema validation during MSI builds.

- `/tools/wix/wix.psm1`: Added version check for PSResourceGet (minimum v1.2.0), implemented custom PSRepository registration for reliable module installation, and improved error handling with try-finally block
- `/tools/packaging/packaging.psm1`: Added `-sval` flag to suppress schema validation during WiX Light execution to prevent build failures
- `/tools/packaging/packaging.psm1`: Minor whitespace cleanup for code formatting consistency
<!-- GitOpsUserAgent=GitOps.Apps.Server.pullrequestcopilot -->