fix: finish verified open PR batch

[Panniantong]

Scope

Integrates the verified value from the remaining open PR queue on top of current main:

• preserve UTF-8 subprocess output on Windows (fix: decode yt-dlp and ffmpeg output as UTF-8 #549)
• fail XHS cookie configuration when the container cannot restart (Report a failed container restart in xhs-cookies #554)
• encode every caller-controlled V2EX query/path value without weakening the TLS fallback (fix(v2ex): percent-encode caller values in API query strings #565)
• use PowerShell/POSIX-safe mcporter named arguments while retaining current LinkedIn/Exa contracts (修复(skill)：改用兼容 PowerShell 的 mcporter 参数语法 #562)
• honor and clamp Xueqiu hot-post limits (Fix get_hot_posts ignoring the limit parameter #519)
• quote pip extras in zsh-facing documentation (docs: quote pip extras install examples #414)
• add a bounded Windows/Python 3.12 full-suite CI job from the useful part of test: make suite portable to Windows #542

The seven commits retain the original contributor authors.

Verification

• pytest tests/ -q: 586 passed, 16 subtests passed
• clean bash test.sh: 586 passed
• Ruff on every changed Python file: passed
• Mypy on changed source modules: passed
• shell syntax and git diff checks: passed
• live V2EX encoded-query smoke: passed
• live mcporter 0.7.3 named-argument Exa query: passed

Boundaries

• no browser credentials or write operations were used for smoke tests
• no unsafe proxy bypass, provider expansion, or new channel was included
• Windows CI must pass on this PR before merge