Refactor PLM to use the canonical Learning Mode analyzer

[Richie Gomez (richiemsft)]

📖 Description

Refactors plm.exe into a mode-neutral legacy WPR helper that delegates sealed-ETL decoding to learning_mode_windows::EtlDenialAnalyzer.

• removes the duplicate EvtQuery / EvtRender analyzer;
• supports the canonical block and allow provider vocabulary;
• emits atomic canonical denials.json output and a structured stop result;
• lets callers select the exact wpr -stop ETL destination with --trace-output;
• pins both Kernel-General (learningModeLogging) and PermissiveLearningMode providers in the embedded WPR profile;
• temporarily adapts canonical file/capability denials into the existing adjusted-config generator;
• refuses incomplete adjusted configs when analysis is truncated and validates output collisions before capture.

Blocked on #759. This PR compiles and tests independently on main, but must not merge until #759 lands because it relies on that PR's complete block/allow and real-V2 capability analysis for correct PLM results.

🔗 References

• Depends on Consolidate Learning Mode analyzer coverage #759.
• Replaces the legacy analyzer from the earlier Learning Mode work while retaining attribution to @lily-barkley and the reusable work tracked in Permissive Learning Mode 5/6 UI Policy #588.

🔍 Validation

• cargo test -p plm --all-targets — 131 passed, 1 ignored existing diagnostic-fixture test.
• cargo clippy -p plm --all-targets -- -D warnings
• cargo fmt --all -- --check

✅ Checklist

• Signed the Contributor License Agreement
• Linked to an issue
• Updated documentation (if applicable)
• Updated Copilot instructions (if build, architecture, or conventions changed)
• If this PR changes Cargo.lock, the dependency-feed-check check passes (see docs/pull-requests.md)

📋 Issue Type

• Bug fix
• Feature
• Task

Microsoft Reviewers: Open in CodeFlow

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.