// Pinned upstream binaries installed by the Linux provisioner.
//
// removed the ttyd pin along with the embedded-terminal admin
// stack. If a future installer step needs to download a pinned binary
// (as ttyd did, because Debian Bookworm's apt does not carry it), the
// conventions live here: version constant, SHA256-by-arch map, and a
// `mapUnameToArch` helper plus a `downloadUrl` builder. SHA256 mismatch
// must abort with a loud error and never write bytes — no silent
// install of unverified content. This file is currently empty of
// entries; it is kept as the canonical location for when the next
// upstream-pinned binary is added.
export {};
