feat!: installation only from a release, into an empty folder; upstream merge/verify and private-instance.md removed, dist adopt, shell-neutral instructions (#153)

Files changed:
- .gitea/workflows/ci.yml
- .gitea/workflows/release.yml
- AGENTS.md
- CHANGES.md
- DEVELOPMENT.md
- EVALS.md
- INSTALL.md
- README.md
- VERSION
- docs/ownership-and-templates.md
- instructions/CONTRACT.md
- instructions/bootstrap.md
- instructions/dev/dev-setup.md
- instructions/dev/stack-dev/SKILL.md
- instructions/gates.md
- instructions/ingest-large-tree.md
- instructions/kb-profiles.md
- instructions/mcp-read-server.md
- instructions/migrations/3.0.0-authoring-conventions.md
- instructions/preflight.md
- instructions/private-instance.md
- instructions/session-setup.md
- instructions/setup-instance.md
- instructions/upgrade-instance.md
- tools/CONTRACT.md
- tools/README.md
- tools/chemenu/cli.py
- tools/chemenu/cli_contract.py
- tools/chemenu/commands/dist_cmd.py
- tools/chemenu/commands/docs_verify.py
- tools/chemenu/commands/doctor.py
- tools/chemenu/commands/git_publish.py
- tools/chemenu/commands/upstream_cmd.py
- tools/chemenu/commands/work_cmd.py
- tools/chemenu/config.py
- tools/chemenu/ownership.py
- tools/chemenu/tests/test_cli.py
- tools/chemenu/tests/test_dist_cmd.py
- tools/chemenu/tests/test_instructions_shell.py
- tools/chemenu/tests/test_preflight.py
- tools/chemenu/tests/test_preflight_pwsh.py
- tools/chemenu/tests/test_run_budget.py
- tools/chemenu/tests/test_upstream_cmd.py
- tools/chemenu/toc.py
- tools/preflight.ps1
- tools/preflight.sh

.gitea/workflows/release.yml

@@ -5,7 +5,9 @@
 # working wiki instance - no checkout of this repo required. CI already proved
 # that path works before this workflow ever runs. Beside it the release carries
 # tools/preflight.sh and tools/preflight.ps1 as assets, which download and unpack
-# that tarball themselves.
+# that tarball themselves, and the two instructions an agent reads before there is
+# a tree to read them in: setup-instance.md, which the installation sentence in
+# INSTALL.md points at, and the preflight.md its first step leads to.
 #
 # The tag is created here, by CI, and never by an agent: AGENTS.md invariant 5
 # ("never call raw git commit/push") stays intact because nothing in a session
@@ -173,6 +175,12 @@ jobs:
           grep -qF "ReleaseChecksumUrl = '${download}/${name}.tar.gz.sha256'" "${BUILD_DIR}/preflight.ps1"
           chmod +x "${BUILD_DIR}/preflight.sh"
 
+          # The two instructions as the tarball carries them (dist export has already
+          # stripped them), not as this checkout holds them.
+          for doc in setup-instance.md preflight.md; do
+            cp "${BUILD_DIR}/${name}/instructions/${doc}" "${BUILD_DIR}/${doc}"
+          done
+
       - name: Publish the release
         if: steps.version.outputs.skip != 'true'
         env:
@@ -198,7 +206,7 @@ jobs:
           id="$(printf '%s' "$release" | jq -r '.id')"
           echo "Created release ${TAG} (id ${id})."
 
-          for asset in "${NAME}.tar.gz" "${NAME}.tar.gz.sha256" preflight.sh preflight.ps1; do
+          for asset in "${NAME}.tar.gz" "${NAME}.tar.gz.sha256" preflight.sh preflight.ps1 setup-instance.md preflight.md; do
             curl -sS -f -X POST "${API}/releases/${id}/assets?name=${asset}" \
               -H "Authorization: token ${TOKEN}" \
               -F "attachment=@${BUILD_DIR}/${asset}" > /dev/null