Dark Site Notes

Air-gapped VKS and GPU Operator upgrades: tar formats, cosign signatures, kernel headers, and every check that passes right up until activation.