Move payload inspection out of the nested Podman build so local ISO
builds do not require /dev/fuse. Normalize local registry references.

Update Deck identity matching for the new upstream scripts and add
fixture coverage for patch idempotence.

Move the live installer base to Fedora 44 while retaining the Fedora 43
Anaconda workaround for explicit legacy builds.

Match Bazzite's live ISO workflow label and output filename while keeping local build and run helpers pointed at the same artifact.

The pinned Titanoboa revision has no Justfile; invoke its GitHub Action
entrypoint and collect the generated ISO.

Run the pinned builder with explicit Justfile and working directory
paths under sudo.

Use the pinned Titanoboa builder and matching build arguments so just
build-installer-iso produces the same media as the GitHub Actions
workflow.

Rewrite installed bootc origins to the configured signed registry
reference.

Use the configured ref for ISO boot origins and derive GHCR fallbacks
from the current repository instead of hardcoding the image path.

Use a formal local installer image tag and set aerocore-os as the
default hostname in both the live image and installed target system.

Write the pre-install /var/tmp bind mount hook from installer/build.sh so both Titanoboa CI builds and local ISO builds carry the fix. The previous lorax template path was only wired through the local helper and did not affect GitHub Actions.