ci(installer): run trusted SSH E2E matrix

docs/implementation-roadmap.md

@@ -32,9 +32,9 @@ Source-install foundations landed:
       SHA-256-verified Go toolchain, clone/update of the public repo, resolved
       branch/commit record, and a staging build. Running service/config is not
       touched (source-install work package 3);
-- [ ] atomic service activation, rollback, and failure-preservation tests over
+- [x] atomic service activation, rollback, and failure-preservation tests over
       SSH (source-install work package 4);
-- [ ] run the full source-install E2E matrix in CI (source-install work
+- [x] run the full source-install E2E matrix in CI (source-install work
       package 5).
 
 Gate: a push publishes `sha-<12>` and `latest` manifests for both platforms,