Prepare Windows VM E2E environment

[sehkone]

Problem

PR #48 implemented all functional requirements for Windows VM provisioning (#19), but E2E verification requires a KVM host and a Windows golden image that do not exist yet. Without this environment, #21 (AC-1/AC-2 integration) cannot exercise Windows scenarios.

Scope

• Provision a cloud KVM instance (e.g. Hetzner bare-metal) for on-demand E2E runs
• Author a Packer template that builds a Windows Server 2022 qcow2 golden image with:
  • OpenSSH Server enabled (password authentication)
  • Sysmon pre-installed at C:\Sysmon\Sysmon64.exe
  • Admin account matching scenario defaults
• Document the image build and E2E execution steps
• Run ac-2-windows scenario end-to-end and verify:
  • VM provisioning and network connectivity
  • Sysmon JSONL collection at host/<hostname>/sysmon.jsonl
  • Validator L1-005 and L2-006 pass

Out of Scope

• Persistent / always-on KVM infrastructure
• Windows VM E2E in GitHub Actions CI (Add AC-1/AC-2 CI with golden fixture comparison #29 explicitly excludes this)
• Multiple Windows image variants

Done when

• Packer template produces a bootable Windows qcow2 image
• ac-2-windows scenario completes and produces a valid bundle on a KVM host
• Steps are documented so any team member can reproduce

Dependencies

• Add Windows VM provisioning and Sysmon collection #19 (Windows VM provisioning code — done via PR Add Windows VM provisioning and Sysmon collection (#19) #48)

Blocked by

• None (can start at any time, but most useful before Run AC-1 and AC-2 end-to-end and fix integration gaps #21)