Fix Windows sign-in: don't launch the browser through cmd.exe (v1.0.1)

cmd's `start` splits unquoted commands at "&", truncating the OAuth authorize
URL after the first query parameter — Windows users hit AADSTS900144 (missing
'scope'). Launch via rundll32 url.dll,FileProtocolHandler instead, which takes
the URL as a plain argument with no shell parsing.

Same fix as claude-msplanner b07a241, applied to the canonical skill copy and
synced into the extension bundle.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

mcp-extension/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "ms-todo",
   "display_name": "Microsoft To Do",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Read and write your Microsoft To Do tasks, lists, and subtasks from Claude.",
   "long_description": "Connects Claude to Microsoft To Do via the Microsoft Graph API. You sign in once as yourself (a browser window opens); the connection then reads and writes your task lists, tasks, and checklist items. Each user's sign-in is private to their own machine.",
   "author": {