- Fresh install (no /usr/local/bin/vps): prefer local vps-prebuild
when its SHA-256 matches the release manifest, otherwise download.
Checksum verification is mandatory whenever the manifest is fetched.
If the local snapshot is used, mv it into the temp dir and chmod 755.
- Update (--update): always re-download the latest release; local
vps-prebuild is never reused for updates (existing behavior).
- Already installed: skip entirely, ignoring any local vps-prebuild.
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>