feat: harden BYOC deployment workflows

[alongubkin]

Summary

• Make deployment cleanup idempotent when late manager operations return not found.
• Add package list, inspect, and verified download commands to the vendor CLI.
• Apply embedded branding consistently across generated deployment CLIs and improve effective compute and config-path feedback.
• Expose compute-pool failure-domain spread and select nested-virtualization-capable machines across AWS, GCP, and Azure.

Validation

• Vendor CLI library suite: 173 passed.
• Deployment CLI library suite: 116 passed.
• Compute selection, package download, branding, config-path, and manager transport tests pass.
• TypeScript core SDK: 83 tests and full typecheck pass.

[greptile-apps]

Greptile Summary

The PR hardens BYOC deployment lifecycle behavior and expands CLI, compute-selection, and deployment-configuration capabilities.

• Makes deployment cleanup tolerate late manager “not found” responses.
• Adds package listing, inspection, and checksum-verified artifact downloads to the platform CLI.
• Preserves configured base-path prefixes when constructing package API URLs.
• Applies embedded branding and improves effective compute/config-path feedback.
• Adds failure-domain spread configuration and nested-virtualization-aware machine selection across supported clouds.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
crates/alien-cli/src/commands/packages.rs	Adds project-scoped package pagination, inspection, artifact selection, secure downloading, and base-path-preserving API URL construction; the previously reported URL-prefix issue is fixed.
crates/alien-deployment/src/manager_api_transport.rs	Makes deployment cleanup idempotent when late manager operations report that the deployment no longer exists.
crates/alien-core/src/instance_catalog.rs	Extends compute selection metadata for nested virtualization and cloud-specific machine capabilities.
packages/core/src/compute-cluster.ts	Exposes compute-pool failure-domain spread configuration through the TypeScript core API.
crates/alien-deploy-cli/src/lib.rs	Applies embedded deployment CLI branding and configuration defaults consistently.

Sequence Diagram

sequenceDiagram
  participant User
  participant CLI as Alien CLI
  participant Platform as Platform API
  participant Storage as Artifact Storage
  User->>CLI: packages list/get/download
  CLI->>Platform: GET base-prefix/v1/packages
  Platform-->>CLI: Package metadata and artifact URL
  CLI->>Storage: Download without platform bearer token
  Storage-->>CLI: Artifact bytes
  CLI->>CLI: Verify SHA-256 and write destination

Loading

_{Reviews (9): Last reviewed commit: "fix(cli): harden package listing and dow..." | Re-trigger Greptile}