feat(os-recovery): add WinRE recovery deployment flow

[mchave3]

Summary

Adds OS Recovery as a WinRE-based last-resort redeployment path for Foundry.

Reason

A remote user may need to redeploy Windows when normal ISO/USB deployment is not available and the existing Windows installation is unusable. OS Recovery lets a provisioned device start Foundry from WinRE through Troubleshoot > Advanced options > Foundry Recovery.

Main changes

• Add an OS Recovery page in Foundry OSD with a single enablement toggle and explanatory placeholder image.
• Persist OS Recovery settings in the Foundry configuration and deploy runtime configuration.
• Provision WinRE with the recovery launcher, bootstrap, Foundry.Connect, 7-Zip, time zone data, and sanitized minimal configuration.
• Keep Foundry.Deploy, Autopilot payloads, network roaming artifacts, certificates, OA3 tools, and media secrets out of the WinRE payload.
• Add Recovery deployment mode handling so the bootstrap downloads Foundry.Deploy at recovery boot.
• Preserve EFI, MSR, and Recovery partitions in Recovery mode and format only the Windows partition.
• Mark provisioned recovery partitions and fail closed when the Recovery target disk is missing or ambiguous.
• Add localized WinRE boot menu entries for supported languages and Recovery-specific launch confirmation text.
• Add a manual WinRE validation script for the recovery payload.

Documentation

Docusaurus documentation was updated separately in foundry-osd/foundry-osd.github.io with commit e115a2a.

Testing

• dotnet build .\src\Foundry.slnx -c Debug -p:Platform=x64
• dotnet test .\src\Foundry.slnx -c Debug -p:Platform=x64 --no-build
• dotnet test .\src\Foundry.Deploy.Tests\Foundry.Deploy.Tests.csproj --filter "ProvisionOsRecoveryStepTests|RecoveryTargetDiskResolverTests|DeploymentLaunchPreparationServiceTests"
• dotnet test .\src\Foundry.Localization.Tests\Foundry.Localization.Tests.csproj
• PowerShell parser check for scripts/Test-FoundryOsRecoveryWinRe.ps1
• npm run build in foundry-osd.github.io

[mchave3]

Obsolete-code audit completed before WinRE testing. Cleanup commit ac4e1e8 removes stale recovery launcher fallbacks, removes an old deploy-config exclusion name, and wires the OS Recovery page to the published documentation URL. Verified with full solution build, full solution tests (800 passed), PowerShell parser check, and stale-symbol search.