Add modern Windows Photos and Clock artifacts

[abrignoni]

Summary

• Modernize WLEAPP Photos coverage for the current Microsoft Photos LocalState/shared.sqlite database.
• Add evidence-backed media previews by extracting only files explicitly referenced by the database.
• Report missing originals without inferring deletion and do not treat image embeddings as image content.
• Parse modern Windows Clock settings.dat hives and legacy Alarms.json files.
• Add focused profile, tests, PyInstaller support, dependency declaration, corpus-lab helpers, and audit documentation.
• Keep primary and supporting timestamps first in report column order.

Validation

• python3 -m pytest admin/test -q: 27 passed
• Repository changed-file lint check: no warnings
• Focused corpus profile: Photos 3 rows, Photos Folders 6 rows, Alarms 2 rows
• Two controlled Photos originals rendered as clickable previews and retained the known SHA-256
• One unavailable original was accurately marked as not present in the acquisition
• No parser errors in the final profile-driven report

Attribution

Artifact and lab contributions use @AlexisBrignoni, Codex while preserving WLEAPP predecessor attribution.