ci: harden cross-os release harness on Windows

scripts/github/run-openclaw-cross-os-release-checks.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+tsx_version="${OPENCLAW_RELEASE_TSX_VERSION:-${TSX_VERSION:-4.21.0}}"
+script_path="${OPENCLAW_RELEASE_CHECKS_SCRIPT:-workflow/scripts/openclaw-cross-os-release-checks.ts}"
+
+temp_root="${OPENCLAW_RELEASE_TSX_TOOL_ROOT:-${RUNNER_TEMP:-${TMPDIR:-/tmp}}}"
+if command -v cygpath >/dev/null 2>&1; then
+  temp_root="$(cygpath -u "${temp_root}")"
+fi
+
+tool_dir="${OPENCLAW_RELEASE_TSX_TOOL_DIR:-${temp_root}/openclaw-release-tsx-${tsx_version}}"
+loader_path="${tool_dir}/node_modules/tsx/dist/loader.mjs"
+
+if [[ ! -f "${loader_path}" ]]; then
+  mkdir -p "${tool_dir}"
+  npm install --prefix "${tool_dir}" --no-save --no-package-lock "tsx@${tsx_version}" >/dev/null
+fi
+
+loader_url="$(
+  node -e '
+    const { resolve } = require("node:path");
+    const { pathToFileURL } = require("node:url");
+    process.stdout.write(pathToFileURL(resolve(process.argv[1])).href);
+  ' "${loader_path}"
+)"
+
+exec node --import "${loader_url}" "${script_path}" "$@"