CMM: add goCMM settings backup/restore + debug scripts

goCMM settings live in two places: 3 pointer values at
HKLM\SOFTWARE\WOW6432Node\General Electric\goCMM, and the real content of all
7 Settings tabs (PC-DMIS, Quindos, Modus, Machine Definition, User Input,
Notifications, Part Groups) in C:\geaofi\ApplicationSettings.xml. Capture-replay
pair, mirroring the Wax/Trace Backup/Install scripts:

- Backup-goCMMSettings.ps1/.bat: on a live legacy bay (admin), zips the registry
  key + the C:\geaofi tree (minus transient LocalProgramCopies/logs) to
  gocmm_backup_<PC>_<ts>.zip.
- Install-goCMMSettings.ps1/.bat: restore at imaging (admin). Imports the key +
  lays down C:\geaofi, then grants BUILTIN\Users WriteKey on the reg key and
  Modify on C:\geaofi - goCMM's RegistrySettings.GetRegistryString opens the key
  with writable:true even to READ, so a locked-down operator throws a
  SecurityException without the grant (the post-lockdown 'registry access not
  allowed' error). Applies a built-in legacy->new FQDN rewrite
  (rd.ds.ge.com -> wjs.geaerospace.net) automatically across the registry values
  and ApplicationSettings.xml (incl PartGroup FullName); -NoDefaultRewrite skips
  it, /replace adds an extra pair, -SelectedPartGroup overrides per bay.
- gocmm-debug.ps1/.bat: run as the operator to reproduce the SecurityException
  and dump the goCMM key ACL (confirms whether lockdown stripped the grant).

All round-trip + FQDN-rewrite verified on the win11 VM. NOTE: covers goCMM only;
PC-DMIS probe calibrations / custom tip angles / machine comp are owned by
PC-DMIS (Hexagon) and not captured here. Not yet wired into 09-Setup-CMM
auto-discovery.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/gea-shopfloor-cmm/scripts/Backup-goCMMSettings.bat

@@ -0,0 +1,19 @@
+@echo off
+REM Backup-goCMMSettings.bat - capture this bay's goCMM settings.
+REM
+REM Run on a LIVE legacy goCMM device, AS ADMINISTRATOR (reg export of HKLM +
+REM read of C:\geaofi needs admin). Captures the registry pointers + the whole
+REM Shared Data Directory (ApplicationSettings.xml = all 7 Settings tabs) into
+REM one zip under C:\Logs\CMM\gocmm-backup\.
+REM
+REM   Backup-goCMMSettings.bat            (default output dir)
+REM   Backup-goCMMSettings.bat -OutDir D:\path
+
+setlocal
+set "HERE=%~dp0"
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%HERE%Backup-goCMMSettings.ps1" %*
+echo.
+echo ---------------------------------------------------------------
+echo Backup zip is under C:\Logs\CMM\gocmm-backup\ (gocmm_backup_*.zip)
+echo ---------------------------------------------------------------
+pause