refactor: move user-facing scripts to repo root; fix set-password ordering

- install-autostart.bat, uninstall-autostart.bat, restart-autostart.bat,
  open-firewall.bat moved from scripts/ to the repo root (next to run.bat and
  set-password.bat). Internal helpers (autostart-run.bat, ensure-vnc-password.ps1,
  get-novnc.*, get-vnc.ps1, list-ips.ps1) stay in scripts/. autostart-run.bat is
  kept in scripts/ because the scheduled task /TR points at it; moving it would
  break already-installed tasks.
- Updated all references (set-password.bat, run.bat, install/restart-autostart.bat,
  AGENTS.md, README.md).
- set-password.bat: write webvnc.conf BEFORE the UltraVNC sync so the web password
  is configured even if ensure-vnc-password.ps1 fails / its UAC is dismissed
  (previously 'Password is not configured' from install-autostart.bat when the
  sync blocked before conf was written).
- AGENTS.md / README.md structure + autostart sections updated for the new layout.

uninstall-autostart.bat

@@ -0,0 +1,26 @@
+@echo off
+REM ============================================================
+REM  uninstall-autostart.bat - remove the web-vnc startup task.
+REM  Deletes the scheduled task "web-vnc" created by
+REM  install-autostart.bat. Requires administrator rights
+REM  (auto-elevates).
+REM ============================================================
+cd /d "%~dp0"
+
+net session >nul 2>nul
+if errorlevel 1 (
+  echo Requesting administrator rights ...
+  powershell -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+  exit /b
+)
+
+set "TASK=web-vnc"
+echo Removing scheduled task "%TASK%" ...
+schtasks /Delete /TN "%TASK%" /F
+if errorlevel 1 (
+  echo [error] Could not remove the task (maybe it does not exist).
+  pause
+  exit /b 1
+)
+echo Done.
+pause