* Install the hosted UI from npm: PHP core (WIP import)
* Prune what the outgoing manifest listed; keep the registry token out of traces and headers
* Warn when the admin UI is not the pinned vector-ui release, with a mode-aware remedy
* Build the hosted bundle into vector-ui's dist/static and ship it in the npm package
* Confine every UI install write and prune to the resolved target directory
* Make --integrity with a --from directory a usage error (exit 2)
* Read the deployment mode before the descriptor request is awaited
* Hold kinetis/vector's UI pin to vector-ui's version; tag the mirror at the split once the pinned UI is on npm
* Check in CI that npm packs the whole hosted bundle; build it at vector-ui's version by default
* Release @kinetis/vector-ui before the mirror, building its bundle in both npm jobs; tag the mirror at the split
* Release vector 0.13.0 and vector-ui 0.11.0: the hosted UI installs from npm
* Document installing, upgrading and releasing the hosted UI through vector:install-ui
* List the packed tarball itself: npm redacts the UUID Nuxt names a build file by
* Ignore S2612 for the hosted UI's install modes: the public bundle is world-readable on purpose