fix: Bugbot finding from promotion PR #284

[shujaatTracebloc]

Resolves the Cursor Bugbot finding surfaced on the client promotion PR (#284, develop → main).

Fix

• Stale bootstrap skips CLI install — CLI installation now lives only inside provision_client, which the orchestrator calls only when provision.sh was fetched. A stale bootstrap that fetched install-cli.sh but notprovision.sh would finish without ever installing the CLI, unlike the previous post-Helm Step 5. Added an elif fallback: when provision_client is absent but install_tracebloc_cli is defined, call it (non-fatal) so the CLI still gets installed for tracebloc data ingest; provisioning then falls through to the dual-mode credential path inside install_client_helm. (chore(release): promote develop → main (week of 2026-06-29) #284 (comment))

Lands on develop; the promotion PR head picks it up on the next sync and Bugbot re-reviews.

🤖 Generated with Claude Code

---

Note

Low Risk
Small installer orchestration fallback for edge-case stale bootstrap bundles; no auth or cluster logic changes beyond when the CLI install runs.

Overview
Fixes a regression where stale bootstraps that fetch install-cli.sh but not provision.sh would complete without installing the tracebloc CLI, after CLI install was folded into provision_client only.

install-k8s.sh now adds an elif branch: if provision_client is undefined but install_tracebloc_cli exists, it calls install_tracebloc_cli (non-fatal, restoring the old post-Helm Step 5 behavior for tracebloc data ingest). Client provisioning still falls through to the dual-mode credential path in install_client_helm.

scripts/manifest.sha256 is updated for the changed install-k8s.sh.

^{Reviewed by Cursor Bugbot for commit 57a0d31. Bugbot is set up for automated code reviews on this repo. Configure here.}