securely wrap execution

[ryan-willis]

resolves INS-5048

what this does:

• builds the normal Electron executable into Insomnia.dll (so that it can be code-signed)
• builds a wrapper into Insomnia.exe (also code-signed)
• when the wrapper runs, makes a copy of Insomnia.dll called insomnia-$VERSION.exe and executes it with custom Windows process mitigation policies
• when Insomnia exits, the wrapper deletes the insomnia-$VERSION.exe file
• standard output is piped directly

this is meant to be a stop-gap for CVE-2025-1353 and will very likely be superseded by other measures (NSIS/MSI installing into protected directories, etc)