Version 3.0.3442 hard blocked by Microsoft Defender ATP, likely related to process PickerHost.exe

My work computer has Microsoft Defender ATP (also known as Windows Defender ATP), which is an enhanced version of the built-in Windows Defender as part of the Windows 10 Enterprise subscription.

After installing the latest version of Azure Functions Core Tools 3.0.3443 via Chocolatey:
`choco install azure-functions-core-tools --params "'/x64:true'"`

The func.exe program cannot execute because it's instantly blocked by the Defender:

```
App or process blocked: PickerHost.exe
Blocked by: Attack surface reduction
Rule: Block executable files from running unless they meet a prevalence, age, or trusted list criteria
Affected items: C:\ProgramData\chocolatey\bin\func.exe
```

It's such a hard block that the file cannot be even added to Defender's exclusion list like other programs normally can. Merely browsing to the directory containing func.exe instantly triggers the access denied block. The Defender really, really hates it for some reason.

The Defender cannot be disabled due to our Intune policies, and seeing that these are all Microsoft products, we'd expect them to work properly together. Any way to have this resolved?

Start by reproducing the Chocolatey installation and running C:\ProgramData\chocolatey\bin\func.exe on a machine with Microsoft Defender ATP and the reported attack-surface-reduction rule. No source file or test is named; done means identifying the cause of the PickerHost.exe block and confirming a compatible release or documented resolution.

Written by the indexing model from the issue text.