docs: Update READMEs with PurgeZeroTier, default-only profile locking, and Intune commands\n\n- Add PurgeZeroTier examples and mode docs\n- Document NB_ALLOW_PROFILE_SWITCHING and default lock behavior\n- Provide EXE/MSI silent install/uninstall commands for Intune\n\nCo-Authored-By: Warp <agent@warp.dev>

feat: Default-only profiles with optional lock, and new PurgeZeroTier mode\n\n- Bootstrap: add PurgeZeroTier mode; add -AllowProfileSwitching (defaults OFF)\n- Register scripts: remove ProfileName; always use --profile default; new -LockProfiles (default ON)\n- Common: add Lock-NetBirdProfiles and Set-MachineEnvironmentVariable helpers\n- New script: Purge-ZeroTier.ps1 to run hardened ZeroTier removal without touching NetBird\n\nCo-Authored-By: Warp <agent@warp.dev>

feat: Robust ZeroTier removal (leave networks, stop service, silent uninstall, purge leftovers, verify)

fix: Make registration resilient across NetBird profile layouts

feat: Enforce 'default' NetBird profile by default

fix: Initialize NetBird service before registration

fix: Allow empty messages in Write-Log for blank lines

fix: Download NetbirdCommon.psm1 module in bootstrap

fix: Remove ValidateSet to allow irm | iex with environment variables

feat: Simplify to scenario-based scripts with unified bootstrap

Update GUIDE_INTUNE_OOBE.md

Fix OOBE module syntax error and sign scripts

Add Entra join types guide and reorganize authentication guides

Add comprehensive MFA and Conditional Access sections to hybrid auth guide

Add comprehensive hybrid authentication methods guide