Unified Common-Enforce for cross-type apps, add WJF Defect Tracker

Replaces the Acrobat-only enforcer with a generic Common-Enforce that
handles all cross-PC-type apps from one manifest + one scheduled task
on the SFLD share at \\tsgwp00525\shared\dt\shopfloor\common\apps\.

Renames:
  Acrobat-Enforce.ps1        -> Common-Enforce.ps1
  Register-AcrobatEnforce    -> Register-CommonEnforce
  acrobat-manifest.json      -> common-apps-manifest.json
  common.acrobatSharePath    -> common.commonAppsSharePath
  'GE Acrobat Enforce' task  -> 'GE Common Apps Enforce' task
  C:\Program Files\GE\Acrobat -> C:\Program Files\GE\CommonApps

Register-CommonEnforce cleans up the legacy 'GE Acrobat Enforce' task
if present from a prior image.

WJF Defect Tracker (replaces ClickOnce):
  - Added to preinstall.json (PCTypes=*, fleet-wide imaging-time install)
  - MSI staged on PXE at pre-install/installers/
  - Added to common-apps-manifest with FileVersion detection on
    C:\Program Files\WJF_Defect_Tracker\Defect_Tracker.exe
  - site-config + 06-OrganizeDesktop: shortcut changed from ClickOnce
    'existing' to exe-path pointing at the MSI-installed binary
  - Update workflow: drop new MSI on share, bump DetectionValue

CMM 09-Setup-CMM: added goCMM + DODA to the ACL grant list.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/Run-ShopfloorSetup.ps1

@@ -245,13 +245,13 @@ Write-Host "Auto-logon set to 4 remaining logins."
 # for version-pinned app enforcement. Initial install already handled by
 # preinstall flow; enforcers only kick in when detection fails.
 $commonSetupDir = Join-Path $PSScriptRoot 'common'
-$registerAcrobat = Join-Path $commonSetupDir 'Register-AcrobatEnforce.ps1'
-if (Test-Path -LiteralPath $registerAcrobat) {
+$registerCommon = Join-Path $commonSetupDir 'Register-CommonEnforce.ps1'
+if (Test-Path -LiteralPath $registerCommon) {
     Write-Host ""
-    Write-Host "=== Registering Acrobat enforcer ==="
-    try { & $registerAcrobat } catch { Write-Warning "Acrobat enforce registration failed: $_" }
+    Write-Host "=== Registering Common Apps enforcer ==="
+    try { & $registerCommon } catch { Write-Warning "Common enforce registration failed: $_" }
 } else {
-    Write-Host "Register-AcrobatEnforce.ps1 not found (optional) - skipping"
+    Write-Host "Register-CommonEnforce.ps1 not found (optional) - skipping"
 }
 
 # Map S: drive on user logon for every account in BUILTIN\Users. The