installer 1.35.0 published (operator yes, 2026-10-20): both webpage git-sync pins -> installer-v1.35.0 (R-1167)

manifests/webpage.yaml

@@ -344,7 +344,7 @@ spec:
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
             - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
-            - --ref=installer-v1.34.0
+            - --ref=installer-v1.35.0
             - --root=/git-scripts
             - --link=current
             - --period=30s
@@ -390,7 +390,7 @@ spec:
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
             - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
-            - --ref=installer-v1.34.0
+            - --ref=installer-v1.35.0
             - --root=/git-scripts
             - --link=current
             - --one-time

scripts/CHANGELOG.md

@@ -14,7 +14,7 @@ case FAILs; an imported-only finding counted as called → the govulncheck cases
 v1.1.4 to v1.8.0 (v1.1.4 cannot read Go 1.27 code; `SCANNERS.md` §5). First scan of today's `main` in all four repos:
 `documentation/audits/night-2026-10-19/P7/triage.md` — 0 called vulnerabilities, 0 real secrets.
 
-## 2026-10-19 — felhom-host-install.sh 1.35.0 (NOT published): the hub's „live box" 409 is worded (R-1167)
+## 2026-10-19 — felhom-host-install.sh 1.35.0 (tag `installer-v1.35.0`, published on the operator's yes 2026-10-20): the hub's „live box" 409 is worded (R-1167)
 
 Written for the night brief of 2026-10-19, Part 6; **not published** (publishing is a tag `installer-v1.35.0` plus the
 website manifest's ref — the operator's word). Since hub 0.161.0 (R-1159) a re-run against a customer whose box is