Shopfloor: single autologon, clear Start pins, Intune sync tool, update docs

- AutoLogonCount reduced from 2 to 1 in Run-ShopfloorSetup.ps1
- Remove default pinned Start Menu tiles and set blank layout for future users
- Add sync_intune.bat: triggers MDM sync and polls for SFLD group policies
- Update README.md and SETUP.md with current project state (boot chain, new
  scripts, samba shares, webapp pages, commit history)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/Run-ShopfloorSetup.ps1

@@ -70,16 +70,21 @@ if ($pcType -ne "Shopfloor") {
 
 Write-Host "Shopfloor setup complete for $pcType."
 
-# Copy backup lockdown script to SupportUser desktop
+# Copy utility scripts to SupportUser desktop
 $lockdownScript = Join-Path $setupDir "backup_lockdown.bat"
 if (Test-Path $lockdownScript) {
     Copy-Item -Path $lockdownScript -Destination "C:\Users\SupportUser\Desktop\backup_lockdown.bat" -Force
     Write-Host "backup_lockdown.bat copied to desktop."
 }
+$syncScript = Join-Path $setupDir "Shopfloor\sync_intune.bat"
+if (Test-Path $syncScript) {
+    Copy-Item -Path $syncScript -Destination "C:\Users\SupportUser\Desktop\sync_intune.bat" -Force
+    Write-Host "sync_intune.bat copied to desktop."
+}
 
-# Set auto-logon to expire after 2 more logins
-reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonCount /t REG_DWORD /d 2 /f | Out-Null
-Write-Host "Auto-logon set to 2 remaining logins."
+# Set auto-logon to expire after 1 more login
+reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonCount /t REG_DWORD /d 1 /f | Out-Null
+Write-Host "Auto-logon set to 1 remaining login."
 
 Write-Host "Rebooting in 10 seconds..."
 shutdown /r /t 10