feat(detmir): add rust-first operations tooling

scripts/rebuild_install_kit.sh

@@ -4,6 +4,25 @@ set -euo pipefail
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 
+TARGET_ROOT="${CARGO_TARGET_DIR:-$ROOT_DIR/adk-rust/target}"
+RUST_BIN="${REBUILD_INSTALL_KIT_RUST:-}"
+
+rust_candidates=()
+if [[ -n "$RUST_BIN" ]]; then
+  rust_candidates+=("$RUST_BIN")
+fi
+rust_candidates+=(
+  "$TARGET_ROOT/release/rebuild-install-kit"
+  "$ROOT_DIR/adk-rust/target/release/rebuild-install-kit"
+  "/usr/local/bin/rebuild-install-kit"
+)
+
+for candidate in "${rust_candidates[@]}"; do
+  if [[ -x "$candidate" ]]; then
+    exec "$candidate" --root "$ROOT_DIR" "$@"
+  fi
+done
+
 KIT_DIR="install-kit-awindows-20260427-211240"
 ZIP_ARCHIVE="${KIT_DIR}.zip"
 TAR_ARCHIVE="${KIT_DIR}.tar.gz"
@@ -34,7 +53,7 @@ if [[ -d "$SERVER_CONFIG_DIR" ]]; then
   cp "$SERVER_CONFIG_DIR"/*.deployment-config.json "$TMP_SERVER_CONFIG_DIR"/
 fi
 
-rm -rf "${KIT_DIR}/ansible" "${KIT_DIR}/aw-server" "${KIT_DIR}/windows" "${KIT_DIR}/server-configs-"*
+rm -rf "${KIT_DIR}/ansible" "${KIT_DIR}/aw-server" "${KIT_DIR}/windows" "${KIT_DIR}/scripts" "${KIT_DIR}/server-configs-"*
 
 ansible_files=(
   ansible/README.md
@@ -61,11 +80,20 @@ aw_server_files=(
   aw-server/aw-rus-healthd.py
   aw-server/aw-rus-healthd.service
   aw-server/aw-rus-healthd.timer
+  aw-server/aw-browser-smoke.service
+  aw-server/aw-browser-smoke.timer
+  aw-server/aw-slo-monitor.py
+  aw-server/aw-slo-monitor.service
+  aw-server/aw-slo-monitor.timer
   aw-server/aw-server.env.example
   aw-server/aw-sw-cleanup.js
   aw-server/aw-worktime-api.py
   aw-server/aw-worktime-api.service
+  aw-server/aw-worktime-prewarm.sh
+  aw-server/aw-worktime-prewarm.service
+  aw-server/aw-worktime-prewarm.timer
   aw-server/aw-worktime-panel.js
+  aw-server/health-check.sh
   aw-server/install_aw_server.sh
   aw-server/settings/classes-worktime.json
   aw-server/settings/views-default.json
@@ -78,8 +106,12 @@ windows_files=(
   windows/deploy-domain-users.ps1
   windows/deploy-ensemble.ps1
   windows/deploy-single-user.ps1
+  windows/AWatchRusCollectorGuardService.cs
+  windows/aw-collector-guard.ps1
+  windows/install-collector-guard-service.ps1
   windows/dlp-endpoint-signals-collector.ps1
   windows/dlp-policy.example.json
+  windows/dlp-policy.native-cross-os.example.json
   windows/email-outbound-collector.ps1
   windows/hardening-recovery.ps1
   windows/migrate-awatch-rus-paths.ps1
@@ -88,9 +120,20 @@ windows_files=(
   windows/worktime-session-collector.ps1
 )
 
+scripts_files=(
+  scripts/aw-webui-browser-smoke.mjs
+  scripts/aw-webui-browser-smoke.sh
+  scripts/check_install_kit_vs_repo.sh
+  scripts/quality-gate.sh
+  scripts/rebuild_install_kit.sh
+  scripts/validate_install_kit.sh
+  scripts/verify_innosetup_installer.sh
+)
+
 sync_tree ansible "${ansible_files[@]}"
 sync_tree aw-server "${aw_server_files[@]}"
 sync_tree windows "${windows_files[@]}"
+sync_tree scripts "${scripts_files[@]}"
 
 mkdir -p "$SERVER_CONFIG_DIR"
 if compgen -G "$TMP_SERVER_CONFIG_DIR/*.deployment-config.json" >/dev/null; then
@@ -104,6 +147,7 @@ Includes:
 - windows/* (deploy scripts, collectors, common module, configs/examples)
 - ansible/* (Windows and AW server playbooks, examples, inventory, tasks)
 - aw-server/* (server installer, health orchestrator, RU patch loader, host groups, default settings)
+- scripts/* (install-kit rebuild/validation, quality gates and browser/web smoke checks)
 - server-configs-192.168.100.18/* (working Windows/RDP config snapshots)
 
 Source: