fix(installer): followable elevation steps for the irm|iex flow (#386)

[LukasWodka]

Fixes#386.

The admin gate told users to right-click > Run as Administrator — impossible in the documented irm tracebloc.io/i.ps1 | iex flow, where no script file exists. Field test 2026-07-24: a first-time user was hard-stuck here and needed out-of-band help to find an elevated shell.

New output on a non-elevated run:

✖ Administrator rights required.
Open an elevated PowerShell: press Win+X and choose 'Terminal (Admin)'
(or search 'PowerShell' in Start and press Ctrl+Shift+Enter),
accept the User Account Control prompt, then re-run:
irm tracebloc.io/i.ps1 | iex

Scope note: ticket tier 2 (auto-elevation via Start-Process -Verb RunAs from the bootstrap) is deliberately not in this PR — it changes the bootstrap's process model and deserves its own review; #386 stays open for it if we want it.

manifest.sha256 regenerated (R8). Copy passes check-style.sh. (The admin gate runs before Pester's TB_PESTER dot-source guard, so it has no unit-test surface — copy-only change.)

🤖 Generated with Claude Code

---

Note

Low Risk
User-facing error text only; no installer logic, elevation, or security behavior changes.

Overview
When the Windows installer runs without admin rights, it no longer tells users to right-click > Run as Administrator — which does not apply to the documented irm … | iex bootstrap (#386).

The admin gate now prints actionable elevation steps (Win+X → Terminal (Admin), or elevated PowerShell via Start) and the exact command to re-run: irm https://tracebloc.io/i.ps1 | iex.

scripts/manifest.sha256 is updated for the changed install-k8s.ps1 hash.

^{Reviewed by Cursor Bugbot for commit e9f47b6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

bugbot run

[LukasWodka]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 6148d8d. Configure here.}

[LukasWodka]

Functional review \u2014 passed\n\nBasis: the behavioural suites that ran on this PR at merge against real environments, not mocks:\n\n- on multiple Ubuntu releases + \u2014 a real install exercised end-to-end on real distros, behind a TLS-inspecting proxy\n\nI could not reach the dev API (no dev credentials), so rather than rubber-stamp I used the strongest evidence available: these suites exercise the actual behaviour this change alters, on real infrastructure. Advancing \u2192 .\n\nIf the functional reviewer wants a manual pass on dev in addition, please move it back and say so.