feat: artifact-first installer and contextual TUI descriptions

[sfloess]

Summary

• add one-line root bootstrap installer suitable for curl/wget piping
• prefer published Python artifacts with explicit source fallback
• add PyPI publishing workflow for tagged releases
• add contextual component descriptions to the setup TUI status area

Safety

• credentials remain in native stores/environment
• source fallback is explicit in logs
• FLOSSWARE_USE_SOURCE=true forces source installation

Follow-up

Package dependency metadata will switch fully to published FlossWare distributions as each dependency receives its first artifact release.

[sonarqubecloud]

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE