Move install-cert after systemd unit creation so reloadcmd succeeds. Add finish-install.sh to recover partial deployments when cert exists. Co-authored-by: Cursor <cursoragent@cursor.com>
dekun