Lataa WinTUI 2.12.1

Elevation safety — WinTUI no longer elevates packages that have to run as you, and it works on PCs where elevation runs as a different account (Windows Administrator protection, or a standard user typing an administrator's credentials).

- User-scope packages (a scope: user rule or setting, or a portable winget package) never start elevation: no upfront helper, no automatic or Ctrl+E retry. In an already elevated WinTUI their actions are skipped with "run WinTUI non-elevated". An explicit elevate: always rule still elevates install and upgrade; fix --portable leaves such a rule alone.
- Separate-account elevation: the helper connects under Administrator protection and over-the-shoulder UAC, reports its account, keeps per-user actions off that account, and creates no profile state before connecting; doctor says when this applies.
- At most one elevation prompt per batch, a responsive TUI while it is open, and no silent fallback: an action that runs without elevation says why, and history records it.
- winget error codes rebuilt from winget's returnCodes.md and matched on winget's own exit code (0x8A150056 = the installer refuses to run elevated, no longer offered an elevated retry).
- Fixes: no "[?1u" left at the prompt after quitting in Windows Terminal 1.25; Settings reset (now Shift+R) keeps per-package rules; Esc-cancelled and all-skipped batches are titled and counted correctly.
- Dependencies: bubbletea 2.1.1 (security fix GHSA-qc58-pfg9-7pph), go-winio 0.6.4, Go 1.26.10; the Win32 syscall symbol set is identical to v2.12.0.