fix(security): self-repair locked .secret_key on Windows (OPENHUMAN-TAURI-GN) (#2061)

.github/workflows/test-reusable.yml

@@ -99,6 +99,36 @@ jobs:
       - name: Test core crate (openhuman)
         run: cargo test -p openhuman
 
+  rust-core-tests-windows:
+    if: inputs.run_rust_core
+    name: Rust Core Tests (Windows — secrets ACL)
+    runs-on: windows-latest
+    timeout-minutes: 20
+    env:
+      CARGO_INCREMENTAL: '0'
+      SCCACHE_GHA_ENABLED: 'true'
+      RUSTC_WRAPPER: sccache
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ inputs.ref }}
+          fetch-depth: 1
+          submodules: recursive
+      - name: Cache Rust build artifacts
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: . -> target
+          cache-on-failure: true
+          key: core-windows
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@v0.0.9
+      - name: Run Windows-specific secrets tests
+        # Runs the full security::secrets suite including all #[cfg(windows)]
+        # tests: self-repair ACL path (OPENHUMAN-TAURI-GN), domain-qualified
+        # icacls username, is_permission_error, repair_windows_acl.
+        run: cargo test -p openhuman -- security::secrets --nocapture
+
   rust-tauri-tests:
     if: inputs.run_rust_tauri
     name: Rust Tauri Shell Tests