chore(standards): all 17 branches to 100% — Windows-compat sweep + checker getattr fix

Windows-compat hardening across every branch to reach 100% on the seedgo
standards audit:
- UTF-8 stdout/stderr reconfigure guards (getattr form) on Rich/CLI entry points
- platform-branched POSIX-only subprocess kwargs (start_new_session ->
  CREATE_NEW_PROCESS_GROUP on win32)
- seedgo windows_compat checker: credit the getattr reconfigure form + locking test
- commons: shared-init test-suite speedup
- spawn: aipass_framework template — strip pytest.ini inline comments + add scaffold smoke test
- includes in-progress cross-OS testing work (doctor/init_flow/cross_os handlers + tests)

Verified: full audit 17/17 at 100%, pyright clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013uzDhtcZ6wT1T9e2AHPQig

src/aipass/api/apps/modules/api_key.py

@@ -15,9 +15,17 @@ Orchestrates API key and credential operations:
 - Initialize .env template
 """
 
+import os
 import sys
 from pathlib import Path
 
+if sys.platform == "win32":
+    os.environ.setdefault("PYTHONUTF8", "1")
+    for _stream in (sys.stdout, sys.stderr):
+        _reconfigure = getattr(_stream, "reconfigure", None)
+        if _reconfigure is not None:
+            _reconfigure(encoding="utf-8", errors="replace")
+
 from typing import List
 from aipass.prax.apps.modules.logger import system_logger as logger
 from aipass.cli.apps.modules import console, header, success, error
@@ -272,10 +280,10 @@ def print_help():
     console.print("  [cyan]drone @api get-secret telegram/bot[/cyan]")
     console.print()
     console.print("  [dim]# Write secret to a protected file[/dim]")
-    console.print("  [cyan]drone @api get-secret telegram/bot --out /tmp/token.txt[/cyan]")
+    console.print("  [cyan]drone @api get-secret telegram/bot --out token.txt[/cyan]")
     console.print()
     console.print("  [dim]# Write secret as JSON to a protected file[/dim]")
-    console.print("  [cyan]drone @api get-secret telegram/bot --out /tmp/bot.json --json[/cyan]")
+    console.print("  [cyan]drone @api get-secret telegram/bot --out bot.json --json[/cyan]")
     console.print()
     console.print("  [dim]# List secrets for a provider[/dim]")
     console.print("  [cyan]drone @api get-secret telegram --list[/cyan]")