Add cmd wrapper for vpnruntime guards and UNC usage note

docs/operations/VPNRUNTIME_POST_STABILIZATION_NEXT_STEPS_2026-05-12.md

@@ -22,6 +22,15 @@ From repository root:
 pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/smoke/run-vpnruntime-ci-guards.ps1 -AntiFlakeCount 20 -TargetedCount 50
 ```
 
+Windows `cmd` wrapper:
+
+```cmd
+scripts\smoke\run-vpnruntime-ci-guards.cmd
+```
+
+On UNC workspaces, `cmd.exe` may print a startup UNC warning, but the wrapper
+uses `pushd` and still runs guard checks correctly.
+
 Expected:
 
 - all guard steps pass
@@ -53,4 +62,3 @@ Immediate triage sequence:
 3. Capture failing output and update:
    - `docs/operations/VPNRUNTIME_CI_STABILIZATION_CHANGELOG_2026-05-12.md`
    - `docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md`
-

scripts/smoke/run-vpnruntime-ci-guards.cmd

@@ -0,0 +1,9 @@
+@echo off
+setlocal
+set SCRIPT_DIR=%~dp0
+pushd "%SCRIPT_DIR%..\.."
+if errorlevel 1 exit /b %ERRORLEVEL%
+pwsh -NoProfile -ExecutionPolicy Bypass -File "%SCRIPT_DIR%run-vpnruntime-ci-guards.ps1" -AntiFlakeCount 20 -TargetedCount 50
+set EXIT_CODE=%ERRORLEVEL%
+popd
+exit /b %EXIT_CODE%