security: restrictive DACL on Windows SHM files

userFRM

SHM files on Windows inherit %TEMP% ACLs (potentially world-readable). Apply SECURITY_ATTRIBUTES with owner-only access to match Unix 0o600.