Distillation

🔴 (14:48) User stated the install script is mutable and will switch URLs at cutover; therefore this PR’s install-script dual-source bridge changes needed removal. 🔴 (14:48) [requested-code-change] User requested restoring exactly 5 files to origin/main: packages/cli/install, packages/cli/test/lib/install-script.test.ts, packages/cli/package.json, package.json, and .github/workflows/ci.yml. 🔴 (14:48) [enforced-workflow] User required safe file editing rather than git checkout or git reset, prohibited touching any other file, required verification with git diff origin/main for exactly the 5 requested paths, and instructed not to commit. 🟡 (14:50) Initial comparison with origin/main found differences only in the 5 requested files: .github/workflows/ci.yml, package.json, packages/cli/install, packages/cli/package.json, and packages/cli/test/lib/install-script.test.ts; aggregate diff was 464 insertions and 68 deletions. 🟡 (14:50) Removed the dual-source bridge implementation from packages/cli/install, including UPGRADE_SOURCES=('getsentry/toolkit|getsentry/toolkit|cli@' 'getsentry/cli|getsentry/cli|'), GitHub/GHCR source probing and fallback helpers (github_get(), source_tag_prefix(), source_github_repo(), source_ghcr_repo(), select_nightly_source(), and select_stable_source()), source-specific stable/nightly URL selection, and temporary response/manifest files. 🟡 (14:50) Removed the root package.json script "check:upgrade-sources": "pnpm --filter sentry run check:upgrade-sources" and the .github/workflows/ci.yml step pnpm run check:upgrade-sources. 🟡 (14:50) Removed the packages/cli/package.json script "check:upgrade-sources": "vitest run test/lib/install-script.test.ts -t 'embeds the shared ordered upgrade source list'". 🟡 (14:50) Restored packages/cli/test/lib/install-script.test.ts, removing expanded fake-curl source-selection infrastructure and tests covering: primary latest stable source; Toolkit CLI tag-prefix filtering; legacy stable fallback only on HTTP 404; stopping on non-404 or network failure; pinned stable probe/download source consistency; nightly source selection before GHCR requests; fallback on Toolkit nightly-manifest 404; stopping on non-404 nightly-manifest response; gzip-to-raw fallback without changing sources; setup-option forwarding; and synchronization with UPGRADE_SOURCES from ../../src/lib/binary.js. 🟡 (14:50) Restored all 5 requested files exactly to origin/main using safe file editing, without checkout/reset and without staging or committing. 🟡 (14:50) Verification passed: git diff origin/main was empty for each of the 5 requested files. Working-tree status still listed only those 5 paths as modified relative to the current branch HEAD, confirming no other files were touched. No commit was created.