[rbardaji]

Closes #371.

What

• Default ref. Piped installs (bash <(curl …/install.sh)) now resolve the newest release tag and clone it instead of main.
  • Tags are vX.Y.Z, sorted with sort -V; pre-releases are skipped.
  • The run prints Installer version: vX.Y.Z (latest release).
  • A re-run moves an existing checkout to the newest release.
• --ref <tag|branch> is a new documented flag.
  • EP_REPO_REF still works; when both are given, the flag wins.
  • setup.sh (NDP-EP) pins its version with EP_REPO_REF, so it is unaffected.
• Fallbacks.
  • A repository with no release falls back to main, with a warning.
  • If the releases cannot be listed, the run stops with a message naming --ref.
• Record. INSTALLER_VERSION (git describe) is written to .env.install-state. The version is also in the install log header (0.34.59).

Tests

• New install/tests/test_default_release_ref.py: 13 tests against a local repository with releases, a pre-release and newer commits on main. 11 of them fail on main.
• Real test: a piped install from GitHub resolved v0.34.60, cloned it, built it, and the Endpoint answered healthy.

Release 0.34.61.