shopfloor: CMM PC-DMIS version gate, ShopDB reporter fixes, staging self-heal

- lib Install-FromManifest 2.5->2.6: add _CmmVersion per-entry filter (reads
  C:\Enrollment\cmm\version.txt). Lifted the version gate out of 09-Setup-CMM
  into the shared lib so imaging and GE-Enforce apply it identically and cannot
  drift (root cause of PC-DMIS 2016 installing on every CMM).
- Install-goCMMSettings: canonicalize the part-group share host to the FQDN in
  both the registry and ApplicationSettings.xml. Handles bare \\tsgwp00525\ and
  the legacy rd.ds.ge.com domain; idempotent. VM-tested.
- Report-AssetToShopDB: resolve the machine number eDNC registry first, then fall
  back to C:\Enrollment\machine-number.txt (matches the lib resolution order) so
  a freshly imaged PC still reports its number for the PC-machine relationship.
- Add Update-CMMEnforcer.ps1/.bat: update one CMM's local lib to the gated
  version and self-heal its PC-DMIS version.
- Add Debug-ShopDBReporting.ps1/.bat: one-shot reporter triage (preconditions,
  client log, live test POST, verdict).
- Add Verify-And-Heal-Staging.ps1/.bat: post-boot check that every imaging
  payload arrived and re-pull anything missing from the share, including the CMM
  bundle and the selected bay's backup (the payload that times out in WinPE).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/gea-shopfloor-collections/Debug-ShopDBReporting.bat

@@ -0,0 +1,37 @@
+@echo off
+REM ==========================================================================
+REM Debug-ShopDBReporting.bat - diagnose a PC not updating its ShopDB entry.
+REM
+REM Usage (run on the problem PC):
+REM   Debug-ShopDBReporting.bat                 full triage incl a live test POST
+REM   Debug-ShopDBReporting.bat /nopost         inspect log + registry only (no POST)
+REM   Debug-ShopDBReporting.bat /mn 2001        force the machine number sent
+REM
+REM The live POST writes this PC's row to ShopDB (idempotent upsert, same as the
+REM scheduled reporter). Use /nopost to avoid writing.
+REM ==========================================================================
+setlocal EnableDelayedExpansion
+
+REM --- self-elevate ---
+net session >nul 2>&1
+if %errorlevel% neq 0 (
+    echo Requesting administrator elevation...
+    powershell -NoProfile -Command "Start-Process -Verb RunAs -FilePath '%~f0' -ArgumentList '%*'"
+    exit /b
+)
+
+set "PS=%~dp0Debug-ShopDBReporting.ps1"
+set "ARGS="
+
+:parse
+if "%~1"=="" goto run
+if /I "%~1"=="/nopost" set "ARGS=!ARGS! -NoPost" & shift & goto parse
+if /I "%~1"=="/mn"     set "ARGS=!ARGS! -MachineNo '%~2'" & shift & shift & goto parse
+shift
+goto parse
+
+:run
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%PS%" !ARGS!
+echo.
+pause
+endlocal