Switch Zoom to Fleet-maintained app version and patch policy (#43149)

Remove local Zoom software manifests and icon and replace them with
fleet-maintained app slugs. Workstations fleet now references
zoom/darwin and zoom/windows slugs; added dynamic labels for Macs and
x86 Windows hosts with Zoom installed. Patch policies for macOS and
Windows updated to include Zoom using the new slugs so patch
checks/notifications are centralized. Deleted legacy
it-and-security/lib/*/software/zoom.yml and the Zoom icon to avoid
duplicate/local package definitions.

it-and-security/fleets/workstations.yml

@@ -150,12 +150,6 @@ software:
       self_service: true
       categories:
         - Security
-    - path: ../lib/macos/software/zoom.yml # Zoom for macOS
-      self_service: true
-      setup_experience: true
-      categories:
-        - Productivity
-        - Communication
     - path: ../lib/macos/software/fleet-keynote-theme.yml # Fleet Keynote theme for macOS
       self_service: true
       labels_include_any:
@@ -225,13 +219,6 @@ software:
     #    - Communication
     #  labels_include_any:
     #    - "ARM-based Windows hosts"
-    - path: ../lib/windows/software/zoom.yml # Zoom for Windows (x86)
-      self_service: true
-      setup_experience: true
-      categories:
-        - Communication
-      labels_include_any:
-        - "x86-based Windows hosts"
     # Commenting out until #25407 is implemented
     # - path: ../lib/windows/software/google-chrome-arm.yml # Google Chrome for Windows (ARM)
     #   self_service: true
@@ -301,6 +288,12 @@ software:
       setup_experience: true
       categories:
         - Communication
+    - slug: zoom/darwin # Zoom for macOS
+      self_service: true
+      setup_experience: true
+      categories:
+        - Communication
+        - Productivity
     - slug: okta-verify/darwin # Okta Verify for macOS
       self_service: true
       setup_experience: true
@@ -339,6 +332,13 @@ software:
         - Browsers
       labels_include_any:
         - "x86-based Windows hosts"
+    - slug: zoom/windows # Zoom for Windows (x86)
+      self_service: true
+      setup_experience: true
+      categories:
+        - Communication
+      labels_include_any:
+        - "x86-based Windows hosts"
     - slug: brave-browser/windows # Brave for Windows
       self_service: true
       categories:

it-and-security/lib/all/labels/macs-with-fleet-maintained-apps-installed.yml

@@ -33,6 +33,11 @@
   query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.tinyspeck.slackmacgap';
   label_membership_type: dynamic
   platform: darwin
+- name: Macs with Zoom installed
+  description: macOS hosts with Zoom installed
+  query: SELECT 1 FROM apps WHERE bundle_identifier = 'us.zoom.xos';
+  label_membership_type: dynamic
+  platform: darwin
 - name: Macs with Okta Verify installed
   description: macOS hosts with Okta Verify installed
   query: SELECT 1 FROM apps WHERE bundle_identifier = 'com.okta.mobile';

it-and-security/lib/all/labels/windows-with-fleet-maintained-apps-installed.yml

@@ -18,6 +18,11 @@
   query: SELECT 1 FROM programs WHERE name = 'Google Chrome' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
   label_membership_type: dynamic
   platform: windows
+- name: x86 Windows hosts with Zoom installed
+  description: x86 Windows hosts with Zoom installed
+  query: SELECT 1 FROM programs WHERE name = 'Zoom Workplace (X64)' AND EXISTS (SELECT 1 FROM os_version WHERE arch NOT LIKE 'ARM%');
+  label_membership_type: dynamic
+  platform: windows
 - name: Windows hosts with Brave Browser installed
   description: Windows hosts with Brave Browser installed
   query: SELECT 1 FROM programs WHERE name = 'Brave';

it-and-security/lib/macos/policies/patch-fleet-maintained-apps.yml

@@ -63,6 +63,14 @@
   install_software: false
   labels_include_any:
     - Macs with Slack installed
+- name: macOS - Zoom up to date
+  description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
+  resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also delete Zoom if you are no longer using it."
+  type: patch
+  fleet_maintained_app_slug: zoom/darwin
+  install_software: false
+  labels_include_any:
+    - Macs with Zoom installed
 - name: macOS - Okta Verify up to date
   description: The host may have an outdated version of Okta Verify, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Okta Verify's built-in update functionality. You can also delete Okta Verify if you are no longer using it."

it-and-security/lib/macos/software/zoom.yml

@@ -1,4 +0,0 @@
-url: https://zoom.us/client/latest/ZoomInstallerIT.pkg
-display_name: Zoom
-icon:
-  path: ../../all/icons/zoom-logo.png

it-and-security/lib/windows/policies/patch-fleet-maintained-apps.yml

@@ -30,6 +30,14 @@
   install_software: false
   labels_include_any:
     - x86 Windows hosts with Google Chrome installed
+- name: Windows - Zoom up to date
+  description: The host may have an outdated version of Zoom, potentially risking security vulnerabilities or compatibility issues.
+  resolution: "Download the latest version from Self-service or check for updates using Zoom's built-in update functionality. You can also uninstall Zoom if you are no longer using it."
+  type: patch
+  fleet_maintained_app_slug: zoom/windows
+  install_software: false
+  labels_include_any:
+    - x86 Windows hosts with Zoom installed
 - name: Windows - Brave Browser up to date
   description: The host may have an outdated version of Brave Browser, potentially risking security vulnerabilities or compatibility issues.
   resolution: "Download the latest version from Self-service or check for updates using Brave Browser's built-in update functionality. You can also uninstall Brave Browser if you are no longer using it."

it-and-security/lib/windows/software/zoom.yml

@@ -1,2 +0,0 @@
-url: https://zoom.us/client/latest/ZoomInstallerFull.msi?archType=x64
-display_name: Zoom