v0.0.64

What's Changed

• refactor(srt-win): rename main.rs to cli.rs (prep for lib entry) by @ig-ant in #372
• feat(windows): SrtWinConfigSchema — argv[1] sentinel multicall override + lib::run_from_args by @ig-ant in #367
• refactor(srt-win): remove same-user mode — exec/WFP/group + tests by @ig-ant in #371
• refactor(srt-win): remove PROTECTED-stamp machinery (dead code after same-user removal) by @ig-ant in #352
• feat(windows): TLS-terminate CA trust via env (no cert-store) + align mux comments by @ig-ant in #346
• fix(srt-win): retry password gen on NERR_PasswordTooShort (2245 = any policy violation) by @ig-ant in #384
• feat(network): serve empty CRL for schannel/revocation-checking clients by @ig-ant in #382
• feat(windows): --sandbox-user to name the provisioned account by @ig-ant in #383
• feat(windows): GIT_CONFIG_* injection for safe.directory + schannel; expandWindowsFsPaths rename by @ig-ant in #381
• docs(windows): platform README + version bump by @ig-ant in #379

Full Changelog: v0.0.63...v0.0.64