Fix kubectl apply Forbidden on GKE - Resolve 'Permission Denied' for Windows Security Cache-Fresh Windows Install: Verify and Configure Defender

Final checklist
- Confirm that the same symptom is gone after a restart or refresh.
- Keep the smallest working change and undo temporary diagnostic settings.