Dev to release

[Zacgoose]

Summary

Each PowerShell worker now uses much less memory and CPU. App script modules are parsed once per process and shared across workers, instead of each worker importing or cloning its own copy. The rest of the PR removes allocation hot spots found while profiling a CIPP cache collection and test run.

Changes

Shared script modules (6427f99, 7a0d3f4)

• New SharedScriptModules: each app .psm1 is parsed once (Parser.ParseFile), and every worker builds it with New-Module | Import-Module. This uses public APIs only, with no reflection.
• A module falls back to a per-worker import through the InitialSessionState if a single module file can't carry it. That covers a binary root, NestedModules/RequiredModules, type or format data, ScriptsToProcess, or top-level dot-sourcing. RequiredAssemblies become SessionStateAssemblyEntry.
• Removes the SSFE clone path, ExportedModuleState and the module-name repair.
• Shared modules are parsed under a runspace, so they have a language mode and & (Get-Module X) { } works. Worker:ModuleInjections depends on this.
• New-Module runs from the module directory, so ModuleBase, Path and $PSScriptRoot point at the module.

Behaviour differences for shared modules (also in docs/configuration.md):

• Every function in the .psm1 is exported, including ones FunctionsToExport leaves out. ModuleBuilder lists one function per file, and apps call helpers across modules.
• Aliases and variables are not exported.
• Version reads 0.0.

PowerShell runtime hygiene (4604a80, 67fc180)

• Ships powershell.config.json (LogLevel: Warning) to $PSHOME. Without it, PowerShell formats a syslog entry for every command start and stop, which was about 11% of all allocation in a cache collection.
• Fixes a race in the module function index: it is now published only once fully built, so concurrent first lookups see every function.
• Cleanup() now clears $Error.
• Global JsonPreloads are parsed by the first worker, and the same object is handed to the others.

Smaller allocation fixes (004e25f, 4e3975c)

• The module function index reads each .psm1 as a stream and only keeps lines that can start a function. Before, it loaded the whole file as one string. Parity tests check it against FunctionBlockRegex.
• The HTTP diagnostic listener no longer reads every non-GET request body to build a slow-request preview. That read buffered and copied every outgoing request, including Table $batch bodies. [HTTP-SLOW] now logs only the URL and elapsed time.

Logging config (45c107d, acb1fa8)

• New App:FileLogging:PowerShellLogLevel (App__FileLogging__PowerShellLogLevel) controls Write-Verbose and Write-Debug capture separately from the .NET log level. It can only narrow LogLevel. If unset, it follows LogLevel as before.
• Docs cover how modules load and the PowerShell logging config.

Tests

• New: WorkerModuleSharingTests (module scope, injections, ModuleBase, unlisted helpers, Get-Help, the NestedModules fallback), ModuleFunctionIndexTests (race + parity), HttpDiagnosticListenerTests, PowerShellLogLevelTests and PowerShellWorkerRunspaceHygieneTests.
• Removed: ClonedWorkerModuleIdentityTests, since the clone path is gone.
• New e2e coverage in the perf harness: a PerfNested fixture module and run-e2e.ps1 checks.