Shopfloor PC type system, webapp enhancements, slim Blancco GRUB

- Shopfloor PC type menu (CMM, WaxAndTrace, Keyence, Genspect, Display, Standard)
- Baseline scripts: OpenText CSF, Start Menu shortcuts, network/WinRM, power/display
- Standard type: eDNC + MarkZebra with 64-bit path mirroring
- CMM type: Hexagon CLM Tools, PC-DMIS 2016/2019 R2
- Display sub-type: Lobby vs Dashboard
- Webapp: enrollment management, image config editor, UI refresh
- Upload-Image.ps1: robocopy MCL cache to PXE server
- Download-Drivers.ps1: Dell driver download pipeline
- Slim Blancco GRUB EFI (10MB -> 660KB) for old hardware compat
- Shopfloor display imaging guide docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/Run-ShopfloorSetup.ps1

@@ -4,6 +4,19 @@
 # Cancel any pending reboot so it doesn't interrupt setup
 shutdown -a 2>$null
 
+# Prompt user to unplug from PXE switch before re-enabling wired adapters
+Write-Host ""
+Write-Host "========================================" -ForegroundColor Yellow
+Write-Host "  UNPLUG the ethernet cable from the" -ForegroundColor Yellow
+Write-Host "  PXE imaging switch NOW." -ForegroundColor Yellow
+Write-Host "========================================" -ForegroundColor Yellow
+Write-Host ""
+Write-Host "Press any key to continue..." -ForegroundColor Yellow
+$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
+
+# Re-enable wired adapters
+Get-NetAdapter -Physical | Where-Object { $_.InterfaceDescription -notmatch 'Wi-Fi|Wireless' } | Enable-NetAdapter -Confirm:$false -ErrorAction SilentlyContinue
+
 $enrollDir = "C:\Enrollment"
 $typeFile  = Join-Path $enrollDir "pc-type.txt"
 $setupDir  = Join-Path $enrollDir "shopfloor-setup"
@@ -56,5 +69,17 @@ if ($pcType -ne "Shopfloor") {
 }
 
 Write-Host "Shopfloor setup complete for $pcType."
+
+# Copy backup lockdown script to SupportUser desktop
+$lockdownScript = Join-Path $setupDir "backup_lockdown.bat"
+if (Test-Path $lockdownScript) {
+    Copy-Item -Path $lockdownScript -Destination "C:\Users\SupportUser\Desktop\backup_lockdown.bat" -Force
+    Write-Host "backup_lockdown.bat copied to desktop."
+}
+
+# Set auto-logon to expire after 2 more logins
+reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonCount /t REG_DWORD /d 2 /f | Out-Null
+Write-Host "Auto-logon set to 2 remaining logins."
+
 Write-Host "Rebooting in 10 seconds..."
 shutdown /r /t 10