feat(flr): windows paths, recovery-site gate, stable partition reads (#4)

skills/zerto-rewind/SKILL.md

@@ -37,7 +37,10 @@ A VM can be in up to three VPGs (local backup + remote DR is common). Tag all of
 
 Human must confirm. Pass `confirmed=true` only after they say yes.
 
-- Bad config / dropped file: `zerto_recover_file` from **that tag**.
+- Bad config / dropped file: `zerto_recover_file` from **that tag**. Pass the guest path
+  (`/home/j/app.yaml` or `C:\Users\j\app.conf`); the server maps it into the FLR
+  namespace. **Locally replicated VPGs only** -- FLR happens at the recovery site, so a
+  cloud-replicated VPG must be recovered from that ZCA. The tool refuses and names the site.
 - Inspect a whole VM: `zerto_offsite_clone` or `zerto_start_failover_test`.
 - Never Failover Live. Never Move. Those are DR, not rewind.