[Luis-0508]

Summary

• Convert all eight CMD entry points to preview-first commands with explicit /apply, consistent exit codes and contextual help.
• Protect user data: stop deleting OneDrive files or shared Microsoft identity stores; narrow Teams resets to Teams-specific caches, and require typed confirmation for destructive or machine-wide actions.
• Correct the OneDrive policy to DisableFileSyncNGSC; add policy backups, product detection for Adobe, credential handling for ADUC, and exact package matching for Appx cleanup.
• Retain the targeted classic Outlook workaround with quoted paths and a current-user toggle override with /restore.
• Add English README, agent guidance, a manual Windows VM test plan, and a Windows GitHub Actions workflow that parses PowerShell, checks safety invariants and smoke-tests /preview on all CMD entry points.

Safety and compatibility

• This PR changes how scripts are invoked: running them without arguments now prints a preview; use /apply to make changes.
• Applying OneDrive or Appx changes still requires independent review of sync/backup state, installed packages and affected account. Team cache resets are not a substitute for sign-out or service troubleshooting.
• This PR does not merge, deploy or invoke an apply action. No destructive Windows commands were run during preparation.

Verification

• Windows script safety checks passed: six static tests, PowerShell syntax parsing, and non-mutating /preview smoke tests for all eight CMD entry points.
• Not executed: /apply, /restore, real uninstall/deprovisioning, credential prompts and other destructive or machine-wide paths. Validate these manually on an isolated, snapshotted Windows VM following docs/TESTING.md before production use.
• All scripts were reviewed against the documented supported operations; a green CI run is not an end-to-end production-safety guarantee.