Provide a system-wide Windows installer for enterprise deployment #5129

Describe the feature or problem you'd like to solve

In our environment, GitHub Copilot CLI installs into the user profile and also attempts to execute files from %LOCALAPPDATA%\copilot. This conflicts with our corporate security requirements, which restrict execution from user-writable directories. Installing the main executable centrally is therefore insufficient if the CLI still extracts or runs supporting executables from the user profile. We need a supported deployment option that works without weakening these restrictions.

Proposed solution

Provide an official system-wide Windows installer, preferably MSI, with the following capabilities:

• Machine-wide installation into an administrator-controlled location such as %ProgramFiles%\GitHub Copilot CLI.
• All bundled executables and runtime dependencies installed centrally, without extracting or executing them from %LOCALAPPDATA%, %APPDATA%, or other user-writable locations.
• Silent installation, upgrade, and uninstallation for centralized software deployment.
• Operation without local administrator privileges after installation.
• Administrator-controlled updates, including an option to disable automatic updates and prevent per-user executable downloads.
• Clear separation between application binaries and user data. Configuration, authentication information, logs, and session history may remain in the user profile, but application executables should not.
• Documentation of executable locations and update behavior so administrators can configure application-control policies appropriately.

Acceptance criteria

An administrator can deploy GitHub Copilot CLI once for all users. A standard user can then use it without the CLI installing, extracting, updating, or executing its own bundled binaries in user-writable directories.

This should work in an environment where execution from %LOCALAPPDATA%\copilot and other user-profile directories is blocked.

Business value

This would make GitHub Copilot CLI deployable in managed corporate environments without requiring security-policy exceptions or unsupported packaging workarounds.

Example prompts or workflows

No response

Additional context

No response