feat(toolbox): first-run lands on the Apps picker (not silent auto-apply)

Hands-on VM testing showed auto-apply skipped the app picker entirely -- the user
couldn't review/adjust apps before install. Land first-run on the Apps step instead
(pre-checked with the collector flavour's defaults); the user adjusts then walks
Apps -> Prefs -> Apply -> Done. The collector already owns account + flavour, so
Welcome/Flavour are skipped. Reverses the earlier auto-apply behavior per operator
feedback.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

windows/welcome/src/SilverOS.Welcome.UI/Components/Routes.razor

@@ -169,11 +169,11 @@ else
         if (pre.Bitlocker.Enable && !string.IsNullOrEmpty(pre.Bitlocker.Pin))
             State.BitLockerPin = pre.Bitlocker.Pin;
 
-        // First run with a preconfig: skip the manual walkthrough. Jump straight to the
-        // Apply step and signal it to auto-start (spec §4d: auto-runs once, shows progress
-        // + recovery key, then Done).
-        _currentStep = 4;
-        _autoApply = true;
+        // First run with a preconfig: the collector already captured account + flavour, so
+        // skip Welcome/Flavour and land on the Apps step (pre-checked with the flavour's
+        // defaults) so the user can review/adjust the app selection before applying. From
+        // there it's Apps -> Prefs -> Apply -> Done. (No auto-apply: the picker is the point.)
+        _currentStep = 2;
     }
 
     private void ReRunSetup()