Add Windows passkey plugin support on main

[CrooLyyCheck]

Summary

• ports the Windows passkey plugin authenticator support onto the current main branch
• registers the Windows WebAuthn plugin COM server from desktop startup and wires the NAPI IPC flow through Electron
• adds APPX COM manifest support and a Windows native credential sync feature flag
• fixes provider registration by accepting the CLSID format used in the package manifest
• keeps AppX release builds updateable by enabling the fourth package build number
• keeps passkey and vault payloads out of diagnostic logs in the touched paths
• adds a fork-only release workflow plus install scripts/docs for test-signed Windows AppX builds

Download / install

• Release page: https://github.com/CrooLyyCheck/clients/releases/tag/passkey-plugin-latest
• Download Bitwarden-Passkey-Plugin-2026.5.0-x64.zip, extract it, then run Install-Bitwarden-PasskeyPlugin.cmd.
• The ZIP currently contains AppX package version 2026.5.0.2.
• After installation, launch Bitwarden once, then enable Bitwarden Desktop in Windows Settings > Accounts > Passkeys > Advanced options.
• The script imports the included .cer into LocalMachine\TrustedPeople and installs the signed AppX package.

Validation

• cargo test -p win_webauthn test_parse_clsid --lib
• node scripts/run-cargo-tool.mjs clippy --all-features --all-targets --tests -- -D warnings
• npm run build --workspace apps/desktop
• local signed AppX package build with self-signed test certificate
• local AppX install updated from 2026.5.0.1 to 2026.5.0.2
• WebAuthNPluginGetAuthenticatorState returned S_OK after first app launch, with state 0 (registered, disabled until user enables it in Settings)

Note: this is intentionally opened against the CrooLyyCheck fork, not the official bitwarden/clients repository.