docs: replace insecure curl | bash with pinned versions and verification#161

hessius merged 3 commits intofeature/136-phase6-cleanuphessius/MeticAI:feature/136-phase6-cleanupfrom

copilot/sub-pr-155-againhessius/MeticAI:copilot/sub-pr-155-againCopy head branch name to clipboard