auth-setup

This is a conventional vendor installer structure, but it downloads and executes remote scripts without integrity or authenticity checks beyond HTTPS. That creates a meaningful supply-chain exposure if a hosting account, domain, or delivery path is compromised. No direct malicious behavior is evident in the provided code; the downloaded installers require separate review.