## Why
MXC needs `SystemRoot` to create the sandboxed filesystem helper process.
## What changed
Allow `SystemRoot` through the Windows helper environment filter using case-insensitive matching.
## Testing
Extend the environment-filter test to cover mixed-case `SystemRoot` and the Windows sandbox write-policy test to verify that writes to an allowed directory succeed.
GitOrigin-RevId: 0979b0c83eff245ee380fae9d7cf05dcc739265f