[codex] Complete HyperBoostX NVIDIA AI migration and safety audit

[jxxzy]

Summary

Completes the HyperBoostX NVIDIA Copilot migration and safety audit pass on branch fix/full-hyperboostx-audit-nvidia-ai.

NVIDIA AI migration

• Replaces the old Copilot service/tests with NvidiaCopilotService.
• Registers the required 10 NVIDIA models, default model, and fallback model.
• Keeps NVIDIA API key handling in Windows Credential Manager via SecureSecretStoreService.
• Adds NVIDIA response parsing, error classification, secret redaction, auto fallback, Safety Guard, and approval-flow tests.
• Removes stale user-facing deprecated AI-provider wording from docs and release notes.

Safety and restore improvements

• Adds profile-level restore metadata for booster registry and power-plan changes.
• Keeps dangerous tweak IDs blocked or gated by expert/admin/confirmation flow.
• Adds strict allowlist coverage for the Battery Saver powercfg /change monitor-timeout-dc command.
• Adds audit, bug, QA, release, build, install, security, and user-guide documentation.

Bug fixes

• Fixed missing booster restore metadata for registry/power-plan actions.
• Fixed Battery Saver command allowlist mismatch.
• Fixed stale AI branding in docs and release notes.
• Fixed stale local Windows drive link in README.

Tests run

• powershell -ExecutionPolicy Bypass -File .\scripts\verify_repo.ps1 -> PASS, Python 40 passed, .NET 20 passed.
• app\venv\Scripts\python.exe -m pytest -> PASS, 40 passed, 1 warning.
• dotnet restore -> PASS.
• dotnet build -> PASS.
• dotnet build -c Release -> PASS.
• dotnet test -> PASS, 20 passed.
• build_backend.bat -> PASS.
• build_release.bat -> PASS.
• build_launcher.bat -> PASS.
• package_release.bat -> PASS.
• build_installer.bat -> PASS.
• Packaged backend health smoke -> PASS.
• Portable app launch/close/no-orphan smoke -> PASS.
• Installed app launch/close/no-orphan smoke -> PASS.
• Deprecated AI-provider keyword scan -> PASS.
• Real NVIDIA token scan -> PASS; only dummy test tokens exist.

Remaining risks

• Real NVIDIA API connection still needs owner-key validation through Settings so the key stays in Windows Credential Manager.
• Installer uninstall/reinstall was not run because it needs a clean Windows lab or owner-approved machine snapshot.
• Full Windows 10/11 admin/non-admin hardware matrix and one-hour idle soak remain manual QA.

Owner instructions

See BUILD.md, INSTALL.md, SECURITY.md, USER_GUIDE.md, RELEASE.md, AUDIT_REPORT.md, and QA_RESULTS.md for build, install, security, NVIDIA key, QA, and release steps.

Zero known Critical/Major bugs after current validation.