[Epic] Trust — Make install, update, and model handling safe and legible

[Jam-Cai]

Parent issue for work that makes Tabby's behavior verifiable and its failure modes recoverable.

In scope: model download integrity/resume/cancel, model health UX, automated test coverage.

Out of scope: suggestion quality (Quality), user controls (Control).

Sub-issues: #6, #7, #12