sweep: pre-existing drift + matrix UDC entry + ignore 142MB EXE

Bundles drift left uncommitted from prior sessions and the UDC matrix
verify entry added today.

Drift items (all per session-progress.md, completed in earlier sessions
but never staged):

- playbook/check-bios.cmd (deleted, moved to BIOS/check-bios.cmd)
- playbook/migrate-to-wifi.ps1 (made no-op 2026-04-24 after the dnsmasq
  no-gateway fix removed the wired-NIC race that motivated it)
- playbook/preinstall/oracle/Install-Oracle11r2.cmd (post-OUI .ora copy
  added 2026-04-24)
- playbook/preinstall/oracle/tnsnames.ora (live tnsnames, 469 KB,
  deployed alongside the wrapper 2026-04-24)
- playbook/pxe_server_setup.yml (dnsmasq dhcp-option=3,6 commented,
  Oracle .ora deploy task added 2026-04-24)
- playbook/shopfloor-setup/BIOS/{check-bios.cmd, models.txt} (BIOS
  detection refinements)
- playbook/shopfloor-setup/Shopfloor/Force-Lockdown.bat
- playbook/shopfloor-setup/Shopfloor/Monitor-IntuneProgress.ps1
- playbook/shopfloor-setup/Shopfloor/SetShopfloorAutoLogon.bat (new)
- playbook/shopfloor-setup/Shopfloor/09-Install-PrinterInstallerMap.ps1
  (new, places PrinterInstallerMap.exe + Public Desktop shortcut at
  imaging time; manifest entry self-heals on tamper)
- playbook/shopfloor-setup/Shopfloor/lib/Show-IntuneDeviceQR.ps1 (new,
  standalone QR rendering for site that wanted just that piece)
- playbook/shopfloor-setup/gea-shopfloor-collections/{Install-eMxInfo.cmd.template,
  Restore-UDCData.ps1} (these were uncommitted in pre-rename Standard/;
  git mv didn't catch them because they were untracked at the time)
- docs/shopfloor-machine-imaging-guide.md (operator-facing how-to)

Matrix:
- common.test/matrix.json: add UDC verify entry to gea-shopfloor-collections
  row. Surfaces UDC silent-install issue (item H pending) instead of
  letting it pass silently.

.gitignore:
- PrinterInstallerMap.exe (142 MB) excluded. Track via LFS or stage on
  PXE server only - too big for regular git history. Untouched on disk
  so existing local copy still works.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -148,8 +148,19 @@
           interface={{ pxe_iface }}
           bind-interfaces
           dhcp-range=10.9.100.10,10.9.100.100,12h
-          dhcp-option=3,10.9.100.1
-          dhcp-option=6,8.8.8.8
+          # No default gateway (option 3) and no DNS (option 6) handed out:
+          # the PXE network is isolated and the PXE server does not forward
+          # internet traffic. Previously we set both, which made imaged PCs
+          # add a default route via 10.9.100.1 and prefer it over WiFi (lower
+          # interface metric). PPKG / Intune enrollment then black-holed
+          # internet-bound traffic. The fix used to be migrate-to-wifi.ps1
+          # disabling the wired NIC during first-logon, which created an
+          # eDNC race (10022 socket errors until the SYSTEM task re-enabled
+          # the wired NIC much later). Removing these options entirely lets
+          # Windows route internet via WiFi and same-subnet PXE/SMB traffic
+          # via wired, no migration script needed.
+          # dhcp-option=3,10.9.100.1
+          # dhcp-option=6,8.8.8.8
           enable-tftp
           tftp-root={{ tftp_dir }}
           dhcp-boot=ipxe.efi
@@ -448,6 +459,18 @@
         mode: '0755'
       ignore_errors: yes
 
+    # Per-file overrides for the .ora config dropped by the wrapper post-install.
+    # The zip's client/ora/ contains dated defaults; shipping an updated
+    # tnsnames.ora alongside the wrapper lets us refresh the DB catalog without
+    # repackaging the 686 MB zip. sqlnet.ora and ldap.ora can be added here the
+    # same way if they ever need to diverge from the zip's bundled copies.
+    - name: "Deploy updated tnsnames.ora override to pre-install/installers/oracle/"
+      copy:
+        src: "{{ usb_mount }}/preinstall/oracle/tnsnames.ora"
+        dest: /srv/samba/enrollment/pre-install/installers/oracle/tnsnames.ora
+        mode: '0644'
+      ignore_errors: yes
+
     - name: "Deploy Oracle 11.2 zip (686 MB) from USB to pre-install/installers/oracle/"
       shell: >
         if [ -f "{{ usb_root }}/oracle/Oracle_OracleDatabase_11r2_V03.zip" ]; then
@@ -459,21 +482,40 @@
         fi
       ignore_errors: yes
 
-    - name: "Deploy BIOS check script and manifest to pre-install/bios/"
+    - name: "Ensure winpeapps/_shared/BIOS directory exists"
+      file:
+        path: /srv/samba/winpeapps/_shared/BIOS
+        state: directory
+        mode: '0755'
+
+    - name: "Deploy BIOS check script + manifest to winpeapps/_shared/BIOS/"
+      # Path matches what startnet.cmd reads at WinPE boot:
+      #   net use B: \\10.9.100.1\winpeapps\_shared
+      #   if exist B:\BIOS\check-bios.cmd ...
+      # Earlier deploy targeted enrollment/pre-install/bios/ (different share)
+      # which startnet.cmd never read, so BIOS_STATUS perma-stuck on
+      # "No BIOS check (share unavailable)". Corrected 2026-04-28.
       copy:
         src: "{{ usb_mount }}/shopfloor-setup/BIOS/{{ item }}"
-        dest: "/srv/samba/enrollment/pre-install/bios/{{ item }}"
+        dest: "/srv/samba/winpeapps/_shared/BIOS/{{ item }}"
         mode: '0644'
       loop:
         - check-bios.cmd
         - models.txt
       ignore_errors: yes
 
-    - name: "Deploy BIOS update binaries from USB to pre-install/bios/"
+    - name: "Deploy Dell Flash64W.exe to winpeapps/_shared/BIOS/"
+      copy:
+        src: "{{ usb_root }}/bios/Flash64W.exe"
+        dest: /srv/samba/winpeapps/_shared/BIOS/Flash64W.exe
+        mode: '0644'
+      ignore_errors: yes
+
+    - name: "Deploy BIOS update binaries from USB to winpeapps/_shared/BIOS/"
       shell: >
         if [ -d "{{ usb_root }}/bios" ]; then
-          cp -f {{ usb_root }}/bios/*.exe /srv/samba/enrollment/pre-install/bios/ 2>/dev/null || true
-          count=$(find /srv/samba/enrollment/pre-install/bios -name '*.exe' | wc -l)
+          cp -f {{ usb_root }}/bios/*.exe /srv/samba/winpeapps/_shared/BIOS/ 2>/dev/null || true
+          count=$(find /srv/samba/winpeapps/_shared/BIOS -name '*.exe' | wc -l)
           echo "Deployed $count BIOS binaries"
         else
           echo "No bios/ on USB - skipping"