Fix Permission denied when auto-opening HTML report on macOS/Linux

Start-Process with a file argument on non-Windows PowerShell tries to
execute the file as a binary instead of using the OS file association,
so an .html report (no +x bit) fails with "Permission denied" and the
script exits with a fatal error after the assessment otherwise succeeds.

Use the platform-native opener at the end of the script:
- macOS:   & open  $htmlReportPath
- Linux:   & xdg-open $htmlReportPath
- Windows: Start-Process $htmlReportPath  (unchanged)

$IsMacOS / $IsLinux are PowerShell 6+ automatic variables, so this is a
no-op on Windows PowerShell 5.1 where neither evaluates true.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ngtanthanh-qc

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to Semantic Versioning.
 - Top navigation now includes an Extensions anchor placed before Run Comparison for faster access to extension findings.
 
 ### Fixed
+- Auto-opening the executive HTML report at the end of a run now uses the platform-native opener (`open` on macOS, `xdg-open` on Linux, `Start-Process` on Windows) instead of `Start-Process` for all platforms, which raised `Permission denied` on macOS/Linux because PowerShell tried to execute the `.html` file as a binary.
 - Pipeline Authorization Scope checks now evaluate effective scope using project/org pipeline settings (`enforceJobAuthScope` and `enforceJobAuthScopeForReleases`) before pipeline-level values, preventing false positives when scope is enforced at project level.
 - Organization policy checks now evaluate policy `value` (with safe casing/boolean normalization) and include the new helper functions in parallel runspace serialization, fixing false results for `OAUTH-02` (SSH Access Disabled) and aligning `OAUTH-01` with the actual policy state.
 

invoke-adoqr.ps1

@@ -6238,7 +6238,15 @@ Write-Host ""
 
 Write-Progress -Activity "Assessment" -Completed
 
-# Auto-open the executive report in the default browser
-Start-Process $htmlReportPath
+# Auto-open the executive report in the default browser (cross-platform)
+if ($IsMacOS) {
+    & open $htmlReportPath
+}
+elseif ($IsLinux) {
+    & xdg-open $htmlReportPath
+}
+else {
+    Start-Process $htmlReportPath
+}
 
 #endregion