refactor(deploy): extract install pipeline into InstallController [ADFA-4434]

PR 2 of ADFA-4434 (decompose DeployFragment; epic ADFA-1028). Strangler-fig, no behaviour change.

The install pipeline is one cohesive, cyclic call-graph (install button -> queue -> per-role
provisioning: download + Ansible runrole + maps + local-vars + state verification), so it moves
as a single controller (splitting would cut the cycle into cross-controller calls).

- New install/presentation/InstallController + InstallHost seam. ~589 LOC moved.
- Shared state (selectedTier, module checkboxes, kiwix overrides, isDownloadingRootfs,
  isBatchInstalling, installationQueue, lastKnownState) stays on the Fragment via the host;
  managers (aria2Manager, prootEngine) via host accessors; mainAct passed in. updateUiState
  (ADB/Share UI) intentionally NOT moved.
- DeployFragment delegates bind()/verifyInstallationState()/fetchLocalVarsFromPRoot().
  2051 -> 1481 LOC. Lint detectors stay disabled (Reset/Delete + ADB/Share still in Fragment).

Verified statically (brace balance, no dangling refs, no unprefixed Fragment calls, bareword +
import scans clean). NOT yet built locally.

Author: luisguzman-adfa