feat(windows-installer): native .exe installer pipeline

Brings the Windows installer work from dev to main without merging
  the rest of the 0.2.5b1 release content. Squashes 12 commits from
  dev (8711c54e..7bb11df2) into a single net-effect commit on main.

  Includes:
  - installers/windows/ — Inno Setup .iss script, build.py, vendored
    NSSM 2.24, bambuddy.ico (multi-resolution app icon), service
    install/uninstall .bat files, build pipeline README
  - backend/app/services/network_utils.py — Windows psutil branch so
    the VP bind-IP dropdown enumerates interfaces; Linux/macOS path
    unchanged
  - .github/workflows/windows-installer.yml — reconciles main's
    kludge-pushed copy with dev's accumulated changes (NSSM
    vendoring, version-from-tag, unversioned alias step, etc.)

  CHANGELOG and README entries for the Windows installer stay on
  dev — they reference unreleased 0.2.5b1 release notes that aren't
  on main yet.

.github/workflows/windows-installer.yml

@@ -57,6 +57,29 @@ jobs:
           & "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" bambuddy.iss
         shell: pwsh
 
+      # Stable + beta tag releases (e.g. v0.2.5b1, v0.3.0) get an unversioned
+      # copy alongside the versioned filename so external surfaces (website,
+      # wiki, newsletters) can link to a stable URL that survives version
+      # bumps:
+      #
+      #   https://github.com/maziggy/bambuddy/releases/latest/download/bambuddy-windows-x64-setup.exe
+      #
+      # GitHub's `latest` redirect excludes prereleases, so this URL always
+      # points at whatever was released as a full release. Daily prereleases
+      # are excluded from the alias because (a) the unversioned name would be
+      # semantically confusing next to the date-stamped versioned name on a
+      # daily prerelease page, and (b) there's no stable "latest daily" URL
+      # anyway (`latest` skips prereleases), so the alias adds no value there.
+      - name: Create unversioned alias (non-daily tags only)
+        if: startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, '-daily.')
+        shell: pwsh
+        working-directory: installers/windows/build/output
+        run: |
+          $versioned = Get-ChildItem -Filter "bambuddy-*-windows-x64-setup.exe" | Select-Object -First 1
+          if (-not $versioned) { throw "no versioned installer .exe found" }
+          Copy-Item $versioned.FullName "bambuddy-windows-x64-setup.exe"
+          Write-Host "alias: bambuddy-windows-x64-setup.exe -> $($versioned.Name)"
+
       - name: Upload installer artifact
         uses: actions/upload-artifact@v4
         with: