fix(sandbox): Windows WFP status access denied check

[hsm-lv]

Summary

• Treat access-denied failures from srt-win wfp status as a dependency warning instead of a hard error.
• Add a focused helper for detecting WFP status access-denied messages and unit coverage for the common Windows forms.

Why

checkWindowsDependencies already verifies the Windows group state before checking WFP. On systems where wfp status cannot be queried without administrator rights, the dependency check currently reports a fatal srt-win wfp status failed error even though this status probe is only used to verify the installed filter set.

Root Cause

The WFP status catch path did not classify Windows access-denied status errors separately, so non-admin WFP status verification failures were handled the same as real status command failures.

Testing

• npm run typecheck
• npm run lint:check
• npm run build
• bun test test/sandbox/winsrt.test.ts

[LLukas22]

I'm also encountering this error on my company computer. I don't think elevation should be required to use srt-win this PR addresses that.