[codex] Add WinGet release packaging support

[SirAndrosBot]

What changed

• Added Build-WinGetPackage.ps1, a release-time script that builds the PLGX, compiles a WinGet-friendly installer, computes SHA256, and generates the three-file WinGet manifest layout.
• Added WinGet/KeePassWinHelloPlugin.iss, an Inno Setup installer definition that installs KeePassWinHelloPlugin.plgx into the local KeePass 2 Plugins folder and supports silent installation.
• Added WinGet/README.md with release and microsoft/winget-pkgs submission instructions.
• Updated the README install section with the eventual package id and command once the manifest is accepted.

Why

Issue #65 asks for WinGet distribution. WinGet cannot install the raw .plgx artifact directly as a KeePass plugin, so this adds a real release path: publish a versioned installer artifact, generate manifests containing InstallerUrl and InstallerSha256, and submit those manifests to the Windows Package Manager Community Repository.

Refs #65

Validation

• git diff --cached --check passed before commit.
• PowerShell parser check passed for Build-WinGetPackage.ps1.
• Dry-run manifest generation passed using dummy PLGX and installer files with -SkipPluginPack -SkipInstallerBuild.

Not run here:

• Inno Setup compile, because ISCC.exe is not installed in this environment.
• winget validate, because winget is not installed in this environment.
• Full plugin packaging/build, because this checkout does not have lib\KeePass.exe.

[sonarqubecloud]

Quality Gate passed

Issues
12 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud