diff --git a/.gitea/workflows/build-release.yml b/.gitea/workflows/build-release.yml
index 2864281..77a345b 100644
--- a/.gitea/workflows/build-release.yml
+++ b/.gitea/workflows/build-release.yml
@@ -34,7 +34,7 @@ jobs:
       # Checkout
       # ---------------------------------------------------------------
       - name: Checkout code
-        shell: pwsh
+        shell: powershell
         run: |
           git clone --depth 1 --branch ${{ github.ref_name }} https://${{ secrets.GIT_TOKEN }}@git.command.vigilcyber.com/vstockwell/wraith.git .
 
@@ -43,7 +43,7 @@ jobs:
       # ---------------------------------------------------------------
       - name: Get version from tag
         id: version
-        shell: pwsh
+        shell: powershell
         run: |
           $tag = "${{ github.ref_name }}" -replace '^v',''
           echo "version=$tag" >> $env:GITHUB_OUTPUT
@@ -53,7 +53,7 @@ jobs:
       # Verify toolchain
       # ---------------------------------------------------------------
       - name: Verify toolchain
-        shell: pwsh
+        shell: powershell
         run: |
           Write-Host "=== Toolchain versions ==="
           node --version
@@ -66,11 +66,11 @@ jobs:
       # Build frontend
       # ---------------------------------------------------------------
       - name: Install frontend dependencies
-        shell: pwsh
+        shell: powershell
         run: npm ci
 
       - name: Build frontend
-        shell: pwsh
+        shell: powershell
         run: |
           npm run build
           Write-Host "=== Frontend built ==="
@@ -80,11 +80,11 @@ jobs:
       # Build Tauri app (native MSVC)
       # ---------------------------------------------------------------
       - name: Install Tauri CLI
-        shell: pwsh
+        shell: powershell
         run: cargo install tauri-cli --version "^2"
 
       - name: Build Tauri app
-        shell: pwsh
+        shell: powershell
         env:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
@@ -97,13 +97,13 @@ jobs:
       # Code signing — jsign + Azure Key Vault (EV cert)
       # ---------------------------------------------------------------
       - name: Download jsign
-        shell: pwsh
+        shell: powershell
         run: |
           Invoke-WebRequest -Uri "https://github.com/ebourg/jsign/releases/download/7.0/jsign-7.0.jar" -OutFile jsign.jar
 
       - name: Get Azure Key Vault access token
         id: azure-token
-        shell: pwsh
+        shell: powershell
         run: |
           $body = @{
             client_id     = "${{ secrets.AZURE_CLIENT_ID }}"
@@ -117,7 +117,7 @@ jobs:
           echo "token=$token" >> $env:GITHUB_OUTPUT
 
       - name: Sign Windows binaries
-        shell: pwsh
+        shell: powershell
         run: |
           Write-Host "=== Signing Wraith binaries with EV certificate ==="
           $installers = Get-ChildItem -Recurse src-tauri\target\release\bundle\nsis\*.exe
@@ -138,7 +138,7 @@ jobs:
       # Create version.json
       # ---------------------------------------------------------------
       - name: Create version.json
-        shell: pwsh
+        shell: powershell
         run: |
           $version = "${{ steps.version.outputs.version }}"
           $installer = (Get-ChildItem -Recurse src-tauri\target\release\bundle\nsis\*.exe | Select-Object -First 1)
@@ -160,7 +160,7 @@ jobs:
       # Upload to Gitea Package Registry
       # ---------------------------------------------------------------
       - name: Upload to Gitea packages
-        shell: pwsh
+        shell: powershell
         run: |
           $version = "${{ steps.version.outputs.version }}"
           $giteaUrl = "https://git.command.vigilcyber.com"
@@ -201,7 +201,7 @@ jobs:
       # Create Gitea Release
       # ---------------------------------------------------------------
       - name: Create Gitea Release
-        shell: pwsh
+        shell: powershell
         run: |
           $version = "${{ steps.version.outputs.version }}"
           $giteaUrl = "https://git.command.vigilcyber.com"