🤖 feat: ship generated install bundle and CI freshness checks #487

Job	Run time
Codex Comments	31s
Detect changed paths	29s
Terraform (fmt/validate/tflint/trivy)	47s
lint	1m 28s
Verify installer manifest is up to date	1m 22s
Trivy image scan	1m 11s
test	1m 18s
Lint GitHub Actions	1m 6s
Trivy filesystem scan	31s
E2E (Kind + CNPG + Templates)	23s
Publish GHCR :main	-1s
	9m 5s

Provide feedback