feat(installer): bundle the database - MySQL 8.4 LTS, not 8.0

The bundled-database option could not actually be built. Stage 0 looks for
mysql\mysql-8.0.x-winx64.msi, and Oracle no longer publishes a standalone server
MSI for 8.0 - every 8.0.x returns 404. What remains for 8.0 is the MySQL
Installer bundle, which is an installer-manager: 'msiexec /i INSTALLDIR=' would
install THAT rather than a database, and stage 0 would then fail on a missing
mysqld.exe.

MySQL 8.0 also reached end of life in April 2026, so bundling it would have put
an unsupported database on every new site.

8.4 LTS still ships the standalone MSI (129MB, which is what the '125MB' note in
stage 0 was written against) and is supported into 2032. Defaults follow it:
install root MySQL Server 8.4, service MySQL84. The operator console still looks
for an 8.0 install path as a fallback, for sites already running one.

Also bundles mysqlclient\ - mysql.exe and mysqldump.exe with the two OpenSSL
DLLs they actually import, 20MB rather than the 51MB of debug and auth-plugin
libraries the archive ships. Stage 2 stages it onto the server, so a site whose
database is on ANOTHER host can still take the pre-upgrade backup that every
upgrade depends on. That was the gap the preflight had started warning about.

Bundle is now 221MB.

docs/INSTALL-WINDOWS-IIS.md

@@ -23,7 +23,7 @@ lives). Run PowerShell as Administrator.
 | --- | --- |
 | **Python 3.14** (64-bit) | `python --version` |
 | **IIS** with **HttpPlatformHandler** | https://www.iis.net/downloads/microsoft/httpplatformhandler (direct MSI: `download.microsoft.com/download/8/1/3/813AC4E6-9203-4F7A-8DD5-F3D54D10C5CD/httpPlatformHandler_amd64.msi`) |
-| **MySQL 8.0** (standard for new installs) | reachable from the app host. 5.7+ is supported on an existing server; 5.6 needs the flags in step 1. CI and the container image both target 8.0. |
+| **MySQL 8.4 LTS** (standard for new installs) | reachable from the app host. 8.0 reached end of life in April 2026 and no longer ships a standalone server MSI. 5.7+ still works on an existing server; 5.6 needs the flags in step 1. |
 | URL Rewrite (optional) | only for the real-client-IP rule; skip it and the app still runs |
 
 The app itself pulls in `waitress` and `tzdata` from `requirements.txt` (step 4).

docs/INSTALL-WINDOWS.md

@@ -35,7 +35,7 @@ time.
 
 Two options. Pick before you start, because they ask different questions.
 
-- **Use the bundled MySQL** - the installer puts MySQL 8.0 on this server and
+- **Use the bundled MySQL** - the installer puts MySQL 8.4 LTS on this server and
   creates the database for you. Choose this when the server has no database
   today. Simplest option, nothing to arrange in advance.
 - **Use an existing MySQL** - the database already exists somewhere, and you have