XP11: whole suite on net40 — Console + vPOD run on XP SP3 through Win11

The Launcher's XP11 port (8730b9b) now extends to everything: one net40
flavor across Console, vPOD, Contract, and SecureConfig (Newtonsoft.Json
everywhere; the net48/System.Text.Json legs and their #if splits are gone
since nothing consumed them).

Console (net40, single TFM like the Launcher):
- The ~31 BinaryFormatter bitmap blobs in the .resx files became raw
  embedded files under assets/icons/ (extracted byte-faithfully via a
  serialization surrogate — the animated square_throbber.gif survives),
  loaded by Properties.Resources.EmbeddedBitmap/EmbeddedIcon. Reason:
  System.Resources.Extensions' DeserializingResourceReader is net461+
  and cannot load on net40. Strings stay in the .resx.
- IReadOnlyList -> IList in AppRegistry (net45+ interface).

vPOD (net40, single TFM):
- Zip extraction now shares the Launcher's MiniZip.cs (linked source), so
  the diff-test install round-trip exercises it against ZipArchive zips.
- RPC args as JTokens; LaunchApps.json persistence via Newtonsoft;
  Thread.VolatileRead instead of Volatile.Read.

Contract/SecureConfig: net40-only; Client/** (PodManagerConnection) now
ships in the one build. The Launcher package gains
TeslaSecureConfiguration.dll as a dependency of the client half.

Tests: the net48 xunit host loads the net40 assemblies (both CLR4), so
the suite exercises exactly what ships — 106/106 green. Also verified
live: net40 console provisioned, managed, and ran a full RP mission
against net40 vPOD (beacon/passphrase/RSA, 53290 RPC, egg load,
Run/Stop Mission).

Version: 4.11.4.3 across Launcher, Console, and vPOD (vPOD joins the
suite version line; was 1.0.0). Ship the dotNetFx40 redistributable in
Launcher/assets for XP-era pods.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Contract/Client/PodManagerConnection.cs

@@ -1,5 +1,5 @@
 // =============================================================================
-// Tesla.Contract — Console-side RPC client  (net48 only)
+// Tesla.Contract — Console-side RPC client
 // =============================================================================
 // Opens an OFB-encrypted TCP connection to the pod (port 53290) and dispatches
 // ILauncherService calls as framed JSON RpcRequest / RpcResponse pairs (see
@@ -8,7 +8,8 @@
 // unchanged.
 //
 // Depends on Tesla.PodConfigurationServer (Tesla.SecureConfig) for the crypto
-// handshake, so it is compiled for net48 only. The Launcher is the server end.
+// handshake. Results deserialize with Newtonsoft.Json (see the serializer note
+// in PodRpcProtocol.cs).
 // =============================================================================
 
 using System;
@@ -16,8 +17,8 @@ using System.IO;
 using System.Net;
 using System.Net.Sockets;
 using System.Reflection;
-using System.Text.Json;
 using System.Threading;
+using Newtonsoft.Json.Linq;
 
 namespace Tesla.Net
 {
@@ -129,14 +130,14 @@ namespace Tesla.Net
                         throw new Exception("Server function threw an exception: " + response.Error);
                     }
                     if (resultType == null
-                        || response.Result.ValueKind == JsonValueKind.Null
-                        || response.Result.ValueKind == JsonValueKind.Undefined)
+                        || response.Result == null
+                        || response.Result.Type == JTokenType.Null)
                     {
                         return resultType != null && resultType.IsValueType
                             ? Activator.CreateInstance(resultType)
                             : null;
                     }
-                    return response.Result.Deserialize(resultType, PodRpc.JsonOptions);
+                    return response.Result.ToObject(resultType, PodRpc.JsonOptions);
                 }
             }
             catch (IOException innerException)