Function render_install_script 

pub fn render_install_script() -> String

The destination bootstrap script (install.sh). Run from the USB on the destination Mac, it: installs the bundled kovra, clears the macOS quarantine flag on the unsigned binary, creates a portable passphrase vault (no OS keychain / Touch ID dependency), generates the recipient keypair, and writes recipient.pub back to the USB for the origin to seal against. Pure — no secret material is embedded (the passphrase is prompted on the destination, never travels).