install.sh: asset matcher still greps for CommandCodeAI/gui — Linux/macOS installs can never resolve a release

[devin-ai-integration]

Bug: install.sh on main can never match a release asset, so macOS/Linux installs always fail with "No verified package was found in the 20 newest releases."

Root cause: REPOSITORY was corrected to CommandCodeAI/desktop, but the awk matcher inside read_asset_metadata() still hardcodes the old repo slug:

# install.sh:52
/"url": "https:\/\/api.github.com\/repos\/CommandCodeAI\/gui\/releases\/assets\// {

Every asset url in the current release JSON is .../repos/CommandCodeAI/desktop/..., so in_asset is never set and no artifact can resolve.

Minimal fix:

- /"url": "https:\/\/api.github.com\/repos\/CommandCodeAI\/gui\/releases\/assets\// {
+ /"url": "https:\/\/api.github.com\/repos\/CommandCodeAI\/desktop\/releases\/assets\// {

or better, interpolate the existing variable so it can’t drift again:

/"url": "https:\/\/api.github.com\/repos\/" repo "\/releases\/assets\//"   # with -v repo="$REPOSITORY"

Also minor: install.sh:232 still fails Darwin:* with "The current macOS preview supports Apple silicon only", but Darwin:x86_64 is handled above it — the message is stale.

Suggested regression test: COMMANDCODE_INSTALL_DRY_RUN=1 ./install.sh asserting the script resolves a real asset name (e.g. CommandCode-*-amd64.deb) against the live release JSON.

Found while researching a fork — verified the matcher cannot hit the current release payload.

[aliarain]

Thanks for the precise report. This is fixed. The installer had two more problems on top of the old repo name: the macOS download names had changed, and the signature check rejected valid signed builds. Both are fixed too. We tested a full install on Apple Silicon, and the download and checksum steps on Intel macOS and Linux. Running the one-line install again should work now.