feat(scripts): add verified download utility with hash checking (#180)

* feat(scripts): add verified download utility with hash checking

- port Get-VerifiedDownload.ps1 from hve-core (zero-delta copy)
- add Pester test suite for all download and hash functions
- support SHA-256, SHA-384, SHA-512 with optional archive extraction

🔒 - Generated by Copilot

* fix(scripts): address PR #180 review comments on Get-VerifiedDownload

- add shebang and fix synopsis/description to list all hash algorithms
- remove trailing whitespace from OutputPath parameter
- move archive to target path before extraction so file persists on disk
- add extraction logic to cache-hit path when Extract flag is set
- add tests for archive persistence and cache-hit extraction

🔧 - Generated by Copilot

* fix(scripts): return extraction directory path when -Extract flag is set

- return extractDir instead of targetPath in both download and cache-hit paths
- update test assertion to verify result path equals extract directory

🐛 - Generated by Copilot

* fix(scripts): resolve PR #180 review comments and CI failure

- fix TestPaths param name mismatch in pester-tests.yml workflow
- scope ErrorActionPreference to function and main block
- use targetPath instead of Url for archive type detection
- update synopsis to clarify SHA-256 script-level support
- fix Remove-Item mock to pass through in Pester tests

🔧 - Generated by Copilot

Author: WilliamBerryiii

.github/workflows/pester-tests.yml

@@ -121,7 +121,7 @@ jobs:
           # Filter to specific test files if running changed-files-only
           $testPaths = '${{ steps.changed-files.outputs.test-paths }}'
           if ($testPaths -and '${{ inputs.changed-files-only }}' -eq 'true') {
-            $configParams['TestPaths'] = $testPaths -split ','
+            $configParams['TestPath'] = $testPaths -split ','
           }
 
           try {