vanta-install — the install engine.
Drives the lifecycle stages [4 Fetch]..[8 Commit] (docs/08-installation.md)
for a resolved artifact: download (mirror-aware, resumable), verify the
checksum (fail-closed), materialize (extract) into a staging tree, publish it
atomically into the content-addressed store, and record a new generation.
The entry point takes a resolved [Artifact] (produced by vanta-resolve).
Supported archive formats: tar.gz/tgz and raw.