feat(detmir): add rust-first operations tooling

windows/installkit/innosetup/AWatch-rus-InnoSetup.iss

@@ -44,6 +44,9 @@ Source: "..\..\aw-standalone-service.ps1"; DestDir: "{app}\windows"; Flags: igno
 Source: "..\..\deploy-single-user.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\deploy-domain-users.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\deploy-ensemble.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
+Source: "..\..\AWatchRusCollectorGuardService.cs"; DestDir: "{app}\windows"; Flags: ignoreversion
+Source: "..\..\aw-collector-guard.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
+Source: "..\..\install-collector-guard-service.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\hardening-recovery.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\validate-deployment.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\migrate-awatch-rus-paths.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
@@ -54,6 +57,7 @@ Source: "..\..\file-operations-collector.ps1"; DestDir: "{app}\windows"; Flags:
 Source: "..\..\email-outbound-collector.ps1"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\web-category-rules.example.json"; DestDir: "{app}\windows"; Flags: ignoreversion
 Source: "..\..\dlp-policy.example.json"; DestDir: "{app}\windows"; Flags: ignoreversion
+Source: "..\..\dlp-policy.native-cross-os.example.json"; DestDir: "{app}\windows"; Flags: ignoreversion
 ; Offline payload (optional): place ZIP into windows/installkit/innosetup/payload/ before compiling.
 Source: "payload\{#AwDefaultZipName}"; DestDir: "{app}\payload"; Flags: ignoreversion skipifsourcedoesntexist
 Source: "innosetup-rdp-package-filelist.md"; DestDir: "{app}\windows\installkit\innosetup"; Flags: ignoreversion

windows/installkit/innosetup/innosetup-rdp-package-filelist.md

@@ -29,6 +29,9 @@
 - `windows/deploy-single-user.ps1`
 - `windows/deploy-domain-users.ps1`
 - `windows/deploy-ensemble.ps1`
+- `windows/AWatchRusCollectorGuardService.cs`
+- `windows/aw-collector-guard.ps1`
+- `windows/install-collector-guard-service.ps1`
 - `windows/hardening-recovery.ps1`
 - `windows/validate-deployment.ps1`
 - `windows/migrate-awatch-rus-paths.ps1`
@@ -41,6 +44,7 @@
 ### 1.4 Шаблоны конфигурации
 - `windows/web-category-rules.example.json`
 - `windows/dlp-policy.example.json`
+- `windows/dlp-policy.native-cross-os.example.json`
 
 ## 2) Бинарный payload ActivityWatch
 
@@ -83,6 +87,7 @@
 - `windows\dlp-endpoint-signals-collector.ps1`
 - `windows\web-category-rules.example.json`
 - `windows\dlp-policy.example.json`
+- `windows\dlp-policy.native-cross-os.example.json`
 - `payload\activitywatch-v0.13.2-windows-x86_64.zip` (только для offline-режима)
 
 ## 6) Контроль перед сборкой .iss