🤖 feat: ship generated install bundle and CI freshness checks #488

Job	Run time
Detect changed paths	29s
Codex Comments	37s
lint	1m 29s
Trivy image scan	1m 15s
test	1m 31s
Trivy filesystem scan	34s
Terraform (fmt/validate/tflint/trivy)	52s
Lint GitHub Actions	41s
Verify installer manifest is up to date	1m 7s
E2E (Kind + CNPG + Templates)	21s
Publish GHCR :main	-1s
	8m 55s

Provide feedback