b765cca0ed
---ci--- project: orca phase: 17 milestone: v0.12 status: execute ---/ci--- install.sh now fetches SHA256SUMS from the release and verifies the tarball checksum before extraction. Fail closed on mismatch. Warns if SHA256SUMS is absent (insecure). Build green.