feat: add worker install and deploy

checks/cbssl/README.md

@@ -30,7 +30,6 @@ The checker looks for CA certificates in the following locations (in order):
 2. `/etc/ssl/cert.pem` - macOS system certificates
 3. `/etc/pki/tls/certs/ca-bundle.crt` - RHEL/CentOS system certificates
 4. `/usr/local/share/ca-certificates/` - Custom certificate directory
-5. `/data/rsmon/docker/cert-bundles/output/` - Project-specific certificate bundles
 
 ### Mozilla CA Bundle
 
@@ -38,7 +37,7 @@ The project includes the Mozilla CA certificate bundle which contains the same C
 
 ```bash
 # Downloaded from: https://curl.se/ca/cacert.pem
-# Location: docker/cert-bundles/output/mozilla-ca-bundle.crt
+# Install additional certificates in the operating system trust store.
 # Certificate count: 144 CA certificates
 ```
 
@@ -125,12 +124,11 @@ To update the CA certificate bundles:
 
 ```bash
 # Download latest Mozilla CA bundle
-cd /data/rsmon
-curl -fsSL -o docker/cert-bundles/output/mozilla-ca-bundle.crt \
+curl -fsSL -o /usr/local/share/ca-certificates/mozilla-ca-bundle.crt \
     https://curl.se/ca/cacert.pem
 
 # Verify
-grep -c "BEGIN CERTIFICATE" docker/cert-bundles/output/mozilla-ca-bundle.crt
+grep -c "BEGIN CERTIFICATE" /usr/local/share/ca-certificates/mozilla-ca-bundle.crt
 ```
 
 ## Troubleshooting
@@ -141,7 +139,7 @@ This error occurs when no CA certificates can be found. Solutions:
 
 1. Ensure the system has `ca-certificates` package installed
 2. Place custom CA certificates in `/usr/local/share/ca-certificates/`
-3. Add certificates to the project bundle at `docker/cert-bundles/output/`
+3. Add certificates to the operating system trust store
 
 ### Certificate validation failures
 

checks/cbssl/cbssl.go

@@ -313,7 +313,6 @@ func LoadBrowserCARoots() (chrome, firefox *x509.CertPool, err error) {
 		"/etc/ssl/cert.pem",                       // macOS
 		"/etc/pki/tls/certs/ca-bundle.crt",        // RHEL/CentOS
 		"/usr/local/share/ca-certificates/",       // Custom certs
-		"/data/rsmon/docker/cert-bundles/output/", // Our custom bundled certs
 	}
 
 	for _, certPath := range certPaths {
@@ -389,7 +388,6 @@ func loadFirefoxCARoots(pool *x509.CertPool) bool {
 	paths := []string{
 		"/usr/lib/x86_64-linux-gnu/libnssckbi.so",         // Debian/Ubuntu NSS module
 		"/usr/lib/libnssckbi.so",                          // Generic path
-		"/data/rsmon/docker/cert-bundles/output/mozilla/", // Our bundled Mozilla certs
 	}
 
 	for _, path := range paths {