docs(readme): add Windows-native usage and compatibility status

Author: gagradebnath

README.md

@@ -54,6 +54,12 @@ cd gogcli
 make
 ```
 
+Windows (PowerShell, no Make/bash required):
+
+```powershell
+go build -o .\bin\gog.exe .\cmd\gog
+```
+
 Run:
 
 ```bash
@@ -107,6 +113,12 @@ Before adding an account, create OAuth2 credentials from Google Cloud Console:
 gog auth credentials ~/Downloads/client_secret_....json
 ```
 
+Windows PowerShell:
+
+```powershell
+.\bin\gog.exe auth credentials "C:\path\to\client_secret_....json"
+```
+
 For multiple OAuth clients/projects:
 
 ```bash
@@ -120,6 +132,12 @@ gog auth credentials list
 gog auth add you@gmail.com
 ```
 
+Windows PowerShell:
+
+```powershell
+.\bin\gog.exe auth add you@gmail.com
+```
+
 This will open a browser window for OAuth authorization. The refresh token is stored securely in your system keychain.
 
 Headless / remote server flows (no browser on the server):
@@ -175,6 +193,13 @@ export GOG_ACCOUNT=you@gmail.com
 gog gmail labels list
 ```
 
+Windows PowerShell:
+
+```powershell
+$env:GOG_ACCOUNT = "you@gmail.com"
+.\bin\gog.exe gmail labels list
+```
+
 ## Authentication & Secrets
 
 ### Accounts and tokens
@@ -557,6 +582,7 @@ Options:
 - **Never commit OAuth client credentials** to version control
 - Store client credentials outside your project directory
 - Use different OAuth clients for development and production
+- Rotate the OAuth client secret immediately if it is ever shared or exposed
 - Re-authorize with `--force-consent` if you suspect token compromise
 - Remove unused accounts with `gog auth remove <email>`
 
@@ -1677,6 +1703,13 @@ Go test wrapper (opt-in):
 GOG_LIVE=1 go test -tags=integration ./internal/integration -run Live
 ```
 
+Windows PowerShell:
+
+```powershell
+$env:GOG_LIVE = "1"
+go test -tags=integration ./internal/integration -run Live
+```
+
 Optional env:
 - `GOG_LIVE_FAST=1`
 - `GOG_LIVE_SKIP=groups,keep`

docs/refactor/README.md

@@ -12,6 +12,11 @@ Shipped (today)
 - `exports.md`: Drive-backed export command pattern (`docs|slides|sheets`).
 - `output.md`: shared table + paging helpers.
 - `templates.md`: googleauth HTML templates via `//go:embed`.
+- Windows compatibility pass:
+  - `config.ExpandPath` handles both `~/...` and `~\\...`.
+  - integration live tests support Windows via `scripts/live-test.ps1` wrapper.
+  - README now documents Windows-native build/auth/live-test flows.
+  - full `go test ./...` and `govulncheck` validation completed on Windows.
 
 Backlog / next wins