1.1.3 - locale-safe shortcuts and scoped cleanup

Safety and correctness fixes for shortcut handling; no launcher (exe) change.

• The debug shortcut is now DeepSeek Harness (Debug).lnk. WScript.Shell marshals the link path through the ANSI code page, so the previous Chinese-named link reached COM as DeepSeek Harness (????).lnk on any non-CJK Windows and Save() threw FileNotFoundException — aborting the script and skipping the Start Menu link. An existing pre-1.1.3 Chinese-named link is migrated away.
• The Start Menu shortcut is no longer skipped when sign-in autostart is enabled (the generated script assigned a string to its own [switch]$Startup parameter; PowerShell variable names are case-insensitive). The script also takes -DesktopPath/-StartupPath/-ProgramsPath overrides.
• Cleanup can only delete links this installation created: each launcher home records the absolute paths it made in shortcuts.json, and removeShortcuts / cleanup delete exactly those (older installs without the manifest fall back to the default names). Destructive helpers also honour the test seam: with DSH_DESKTOP_TEST=1 they report wouldRemove instead of deleting unless dryRun: false is explicit. POST /api/dsh-desktop/cleanup answers 409 when nothing is installed.
• The manifest records the debug link again: entries are computed from the requested folders and confirmed on disk instead of parsed from PowerShell stdout (both scripts now force UTF-8 console output).
• Tests: 50 → 57 checks, including a real PowerShell run against sandbox folders, sandboxed USERPROFILE/APPDATA with an escape assertion, the dry-run seam and manifest-scoped deletion.

Published through npm trusted publishing (OIDC) with provenance.