fix: UTF-8 BOM in RDP bundle zip for Russian Windows PowerShell (0.20.16)

backend/app/services/winrm_connect.py

@@ -339,7 +339,7 @@ def _deploy_from_staging_body(staging_path: str) -> str:
         "$deploy = Join-Path $staging 'Deploy-LoginMonitor.ps1'\n"
         "if (-not (Test-Path -LiteralPath $deploy)) { throw \"Deploy-LoginMonitor.ps1 missing in staging\" }\n"
         "Write-Output \"Running: $deploy -SourceShareRoot $staging\"\n"
-        "& $deploy -SourceShareRoot $staging\n"
+        "powershell.exe -NoProfile -ExecutionPolicy Bypass -File $deploy -SourceShareRoot $staging\n"
     )
 
 
@@ -358,7 +358,8 @@ def _download_bundle_body(staging_path: str, bundle_url: str) -> str:
         "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12\n"
         "Write-Output \"Downloading bundle: $url\"\n"
         "Invoke-WebRequest -Uri $url -OutFile $zip -UseBasicParsing\n"
-        "Expand-Archive -LiteralPath $zip -DestinationPath $staging -Force\n"
+        "Add-Type -AssemblyName System.IO.Compression.FileSystem\n"
+        "[System.IO.Compression.ZipFile]::ExtractToDirectory($zip, $staging)\n"
         "Remove-Item -LiteralPath $zip -Force\n"
         "Write-Output \"Bundle extracted to $staging\"\n"
     )