Run the Windows CLI without the VC++ runtime

On a locked-down Windows station without the Microsoft VC++ redistributable, the CLI failed to start and the installer wrongly pointed at antivirus; the binary is now self-contained and the installer can pin a version or install a preview build.

• Fixed the Windows CLI to start on any machine: it no longer depends on vcruntime140.dll or other runtime DLLs, and every release is checked for stray runtime imports before it ships
• Improved the Windows installer: it now reports the real exit code on first run and explains a missing-DLL failure instead of the antivirus checklist
• Added --version <x.y.z> to both installers to pin or roll back one station to a released build, and --preview <slot> plus tofupilot update --preview <slot> to install a preview build shared by support before it is released