Add registry authentication in runtime

[kvega005]

Summary of the Pull Request

PR Checklist

• Closes: Link to issue #xxx
• Communication: I've discussed this with core contributors already. If work hasn't been agreed, this work might be rejected
• Tests: Added/updated if needed and all pass
• Localization: All end user facing strings can be localized
• Dev docs: Added/updated if needed
• Documentation updated: If checked, please file a pull request on our docs repo and link it here: #xxx

Detailed Description of the Pull Request / Additional comments

Validation Steps Performed

[Copilot]

Pull request overview

This PR adds registry authentication support to the WSLC runtime Docker HTTP layer (X-Registry-Auth + /auth) and introduces a local-registry helper + tests to validate authenticated pull/push flows.

Changes:

• Add PushImage and Authenticate session APIs and plumb optional X-Registry-Auth through DockerHTTPClient for pull/push.
• Refactor image streaming logic into a shared StreamImageOperation() path with progress callback support.
• Add Windows tests that stand up a local registry container with basic auth and validate failure/success cases.

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
test/windows/WSLCTests.cpp	Adds an authenticated registry E2E test and supporting helpers.
test/windows/CMakeLists.txt	Links Crypt32 for base64 support used by new auth helpers.
src/windows/wslcsession/WSLCSession.h	Adds new COM method declarations and shared streaming helper.
src/windows/wslcsession/WSLCSession.cpp	Implements PushImage/Authenticate and refactors pull/push streaming + auth header plumbing.
src/windows/wslcsession/WSLCContainer.cpp	Avoids sending empty Cmd/Entrypoint (supports default entrypoint behavior).
src/windows/wslcsession/DockerHTTPClient.h	Extends pull request API to accept registry auth; adds push/auth APIs; supports custom headers.
src/windows/wslcsession/DockerHTTPClient.cpp	Sets X-Registry-Auth on pull/push and adds /auth implementation.
src/windows/service/inc/wslc.idl	Extends IWSLCSession with PushImage and Authenticate.
src/windows/inc/docker_schema.h	Adds auth request/response schema; makes Entrypoint optional in create-container schema.
src/windows/common/WSLCLocalRegistry.h / .cpp	Adds helper to start a local registry container (optionally with htpasswd auth).
src/windows/common/WslcCredentialStore.h / .cpp	Adds helper to build base64 X-Registry-Auth payloads.
src/windows/common/WSLCContainerLauncher.h	Exposes FormatResult for use in new registry helper.
src/windows/common/CMakeLists.txt	Adds new helper sources/headers and links Crypt32 into common.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 6 comments.

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 16 out of 16 changed files in this pull request and generated 5 comments.

[Copilot]

Pull request overview

Copilot reviewed 25 out of 25 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 25 out of 25 changed files in this pull request and generated 4 comments.

[OneBlue]

LGTM

[OneBlue]

@JohnMcPMS to review the SDK changes

[Copilot]

Pull request overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

src/windows/wslcsession/WSLCSession.cpp:534

• StreamImageOperation hard-codes HTTP 404 → WSLC_E_IMAGE_NOT_FOUND for all operations. For PushImage, a 404 from dockerd commonly represents “no such image (locally)” rather than a registry lookup miss, and the tests in this PR expect a different HRESULT for that scenario. Consider making the 404 mapping operation-specific (e.g., let the caller decide which HRESULT to surface for 404) so Push/Pull can return semantically correct errors.

        if (httpResponse->result == boost::beast::http::status::not_found)
        {
            THROW_HR_WITH_USER_ERROR(WSLC_E_IMAGE_NOT_FOUND, errorMessage);
        }
        else if (httpResponse->result == boost::beast::http::status::bad_request)
        {
            THROW_HR_WITH_USER_ERROR(E_INVALIDARG, errorMessage);
        }
        else
        {
            THROW_HR_WITH_USER_ERROR(E_FAIL, errorMessage);
        }

[Copilot]

Pull request overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 22 out of 22 changed files in this pull request and generated 2 comments.