Persist security for closed temporary-file paths

Opt-in Windows port of File.SetAccessControl on stable method-local paths initialized by the resolved Path.GetTempFileName() factory. Retain both argument evaluations, the same ACL object, and the null-security check before FileInfo construction. Leave device paths, arbitrary parameters/fields, mutated/ref paths, named/commented calls, deferred contexts, unsupported owners and snapshots unchanged. No ACL policy changes or Framework CAS/path-policy/native-failure emulation. Standalone, not in version composites.