feat(host/windows): SudoVDA virtual-display backend (control path)

Windows VirtualDisplay backend driving SudoVDA (the Apollo IDD) via its DeviceIoControl IOCTL protocol: open by interface GUID, ADD at the client's exact WxH@Hz (mode baked into the IOCTL, no EDID seeding), mandatory watchdog ping thread, QueryDisplayConfig name resolution, RAII Drop -> REMOVE. Wired behind the existing VirtualDisplay trait (open()/probe() Windows arms). Validated live on the GPU-less VM (standalone + via the trait, env-gated test): version 0.2.1, ADD 1920x1080@60 -> target, watchdog hold, REMOVE. Monitor activation into a WDDM path (-> capturable \\.\DisplayN) needs a real GPU and is deferred with capture/NVENC. docs/windows-host.md updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

crates/punktfunk-host/Cargo.toml

@@ -101,3 +101,16 @@ khronos-egl = { version = "6", features = ["dynamic"] }
 # GPU-copy into an exportable allocation, export OPAQUE_FD → cuImportExternalMemory (the
 # officially-supported CUDA pairing; raw dmabuf fds are rejected by the desktop driver).
 ash = "0.38"
+
+[target.'cfg(target_os = "windows")'.dependencies]
+# Windows host backends. `windows` covers the Win32/CCD APIs the SudoVDA virtual-display backend
+# drives (SetupAPI device enumeration, DeviceIoControl IOCTLs, QueryDisplayConfig name resolution);
+# capture/encode/input/audio backends extend the feature set as they land.
+windows = { version = "0.62", features = [
+    "Win32_Foundation",
+    "Win32_Security",
+    "Win32_Devices_DeviceAndDriverInstallation",
+    "Win32_Devices_Display",
+    "Win32_Storage_FileSystem",
+    "Win32_System_IO",
+] }