docs: add step-by-step Windows installation

test/client-installer.test.ts

@@ -121,7 +121,9 @@ test("generic installer preserves identity across safe updates, rollback, downgr
   const installOutput = JSON.parse(output.pop()!);
   assert.equal(installOutput.restartRequired, undefined);
   assert.match(installOutput.nextSteps.join(" "), /当前 Agent.*skillPath.*stdio MCP/);
+  assert.match(installOutput.nextSteps.join(" "), /Windows.*\.cmd.*禁止把网关 URL 配成 MCP/s);
   assert.match(installOutput.nextSteps.join(" "), /立即处理 postInstall.*不得等待用户首次查询审批/s);
+  assert.match(installOutput.nextSteps.join(" "), /双来源只读验证.*钉钉 OA 与薪福通均为 ok/s);
   assert.equal(installOutput.postInstall.status, "authorization_required");
   assert.equal(installOutput.postInstall.authChallenge.directUrl, "https://approval.example.test/oauth/device?user_code=INSTALL-1234");
   assert.deepEqual(installOutput.loginCommand, {