feat(windows): Chrome App-Bound Encryption implementation (#573)

* build(abe): add zig-cc payload build system + C reflective loader
* feat(abe): add reflective injector and Go ABE key-retriever primitives
* feat(abe): wire ABERetriever into DefaultRetriever chain + --abe-key CLI
* feat(abe): route Chromium v20 ciphertext through AES-GCM with ABE key

crypto/windows/abe_native/com_iid.h

@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: Apache-2.0
+
+#ifndef HBD_ABE_COM_IID_H
+#define HBD_ABE_COM_IID_H
+
+#define WIN32_LEAN_AND_MEAN
+#include <windows.h>
+
+typedef enum BrowserKind {
+    BROWSER_UNKNOWN = 0,
+    BROWSER_CHROME_BASE,   // DecryptData at vtable slot 5
+    BROWSER_EDGE,          // DecryptData at vtable slot 8
+    BROWSER_AVAST,         // DecryptData at vtable slot 13
+} BrowserKind;
+
+typedef struct BrowserComIds {
+    const char *exe_basename;
+    BrowserKind kind;
+    GUID clsid;
+    GUID iid_v1;
+    BOOL has_iid_v2;
+    GUID iid_v2;
+} BrowserComIds;
+
+const BrowserComIds *LookupBrowserByExe(const char *exe_basename);
+
+unsigned int DecryptDataVtblIndex(BrowserKind kind);
+
+#endif // HBD_ABE_COM_IID_H