feat: PowerShell 7 preflight and launcher - preflight.ps1, wikitool.ps1, doctor policy and Mark of the Web checks, pwsh CI job (#151, B)

Files changed:
- .gitea/workflows/ci.yml
- CHANGES.md
- INSTALL.md
- README.md
- VERSION
- docs/why-gates-are-code.md
- instructions/bootstrap.md
- instructions/bug-report.md
- instructions/preflight.md
- instructions/setup-instance.md
- instructions/upgrade-instance.md
- tools/CONTRACT.md
- tools/README.md
- tools/bugreport.py
- tools/chemenu/cli.py
- tools/chemenu/commands/dist_cmd.py
- tools/chemenu/commands/doctor.py
- tools/chemenu/prerequisites.py
- tools/chemenu/tests/conftest.py
- tools/chemenu/tests/test_bugreport.py
- tools/chemenu/tests/test_doctor.py
- tools/chemenu/tests/test_preflight.py
- tools/chemenu/tests/test_preflight_pwsh.py
- tools/chemenu/toolpaths.py
- tools/preflight.ps1
- tools/wikitool
- tools/wikitool.ps1

tools/bugreport.py

@@ -1003,7 +1003,9 @@ def launcher_command(root: Path):
         ps1, sh = tools / "wikitool.ps1", tools / "wikitool"
         pwsh = shutil.which("pwsh")
         if ps1.is_file() and pwsh:
-            return [pwsh, "-NoProfile", "-File", str(ps1)]
+            # Bypass: a policy that blocks the script is a finding for `doctor`'s
+            # execution-policy check, and must not also stop the report from running.
+            return [pwsh, "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", str(ps1)]
         bash = shutil.which("bash")
         if sh.is_file() and bash:
             return [bash, str(sh)]