fix: Bugbot findings from promotion PR #383

[shujaatTracebloc]

Resolves Cursor Bugbot findings surfaced on the client promotion PR (#383, develop → main).

Fixes:

• Golden scrape hard-codes step letters — broaden the step-header scrape from [a-f] to [a-z] so a future step isn't silently dropped from the catalog. (Release develop → main #383 (comment))
• Golden capture mixes stdout and stderr — capture print_summary through a temp file so stdout+stderr keep deterministic order across machines. (Release develop → main #383 (comment))
• Missing golden lacks regenerate hint — check_golden now points at TB_UPDATE_GOLDEN=1 when a golden file is absent instead of a raw diff error. (Release develop → main #383 (comment))
• Tier 1 falsely promises no admin — make the host-audit copy honest about the one-time admin step still required until rootless Docker lands. (Release develop → main #383 (comment))

Lands on develop; the promotion PR head picks these up on the next sync and Bugbot re-reviews.

🤖 Generated with Claude Code

---

Note

Low Risk
User-facing wording and test-only harness changes; no install logic or privilege paths are altered.

Overview
Addresses Bugbot feedback on the installer copy catalog tests and host audit messaging.

Tier 1 honesty: The host-check panel no longer implies zero admin for Tier 1; it now states that Docker is set up for the user’s account but a one-time admin step is still required until rootless Docker ships (#1177). Golden copy and probe.bats expectations follow.

Golden catalog robustness: Step headers are scraped with [a-z] instead of [a-f] so future steps aren’t dropped silently. print_summary output for outcome goldens is captured via a single temp file (stdout and stderr merged) to avoid pipe interleaving flakes. Missing golden files get a clear TB_UPDATE_GOLDEN regenerate hint instead of a raw diff error.

scripts/manifest.sha256 is updated for probe.sh.

^{Reviewed by Cursor Bugbot for commit 1a3b5ad. Bugbot is set up for automated code reviews on this repo. Configure here.}