Harden NGINX installer reliability across Bash and PowerShell

[Copilot]

• Investigate CI run states and confirm why checksum workflow is skipped on this PR
• Review existing workflow files and checksum helper script for bugs and duplication
• Refactor checksum helper script to cover all nginx dependencies with installer-matching source URLs
• Add non-interactive apply mode to checksum helper script for CI reuse
• Simplify update-nginx-checksums workflow to call helper script and avoid duplicate logic
• Prevent unnecessary reruns by restricting workflow job to renovate actor on renovate branches
• Run syntax/lint checks for modified scripts and workflow files
• Re-run parallel validation and summarize remaining issues

[Copilot]

Pull request overview

Updates the NGINX Bash and PowerShell installer scripts to fail fast when dynamic modules are missing or cannot be copied, preventing installs from completing with broken runtime module loading.

Changes:

• Bash: make dynamic-module copy strict, add explicit ACME artifact check, and verify required modules exist post-install.
• PowerShell: fix pacman failure detection using $LASTEXITCODE, harden module copy with try/catch, and add required-module + ACME artifact verification for parity.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
nginx/nginx_installer.sh	Replaces permissive module-copy behavior with strict checks and required-module verification to prevent partial installs.
nginx/nginx_installer.ps1	Corrects native command failure detection and hardens module-copy/verification logic to match Bash behavior.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.