docs: 替换 AtomGit 源为 GitHub 源并完善相关检查

1. 更新 readme.md 中的安装脚本地址为 GitHub 原生源
2. 新增安装链接校验测试脚本
3. 重构 install.ps1 的架构检测逻辑，优先使用系统环境变量而非 RuntimeInformation
4. 新增 install.ps1 的架构检测校验规则
5. 优化文档中的编码检查说明

Author: greper

AGENTS.md

@@ -4,7 +4,7 @@
 
 - 与用户沟通、代码注释、文档、日志和面向用户的界面文案，尽量使用中文。
 - 技术专有名词、代码标识符、第三方库名称和命令可保留英文，以保证准确性与可检索性。
-- 供 `irm ... | iex` 直接执行的 PowerShell 安装脚本必须保存为 UTF-8 无 BOM；BOM 会被管道执行当作脚本首字符，导致 `CmdletBinding` 解析失败。对此保留自动化编码检查。
+- 供 `irm ... | iex` 直接执行的 PowerShell 安装脚本必须保存为 UTF-8 无 BOM；BOM 会被管道执行当作脚本首字符，导致 `CmdletBinding` 解析失败。Windows 安装脚本的 CPU 架构检测应优先使用 `PROCESSOR_ARCHITEW6432`、`PROCESSOR_ARCHITECTURE` 等环境变量，不能依赖旧版 .NET 中可能为空的 `RuntimeInformation.OSArchitecture`。对此保留自动化编码检查。
 
 ## TDD 开发
 

readme.md

@@ -43,15 +43,15 @@ Certd Client 是 [Certd](https://github.com/certd/certd) 的证书部署客户
 在 PowerShell 中执行：
 
 ```powershell
-irm https://raw.atomgit.com/certd/certd-client/raw/main/scripts/install.ps1 | iex
+irm https://raw.githubusercontent.com/certd/certd-client/main/scripts/install.ps1 | iex
 ```
 
 脚本会提示安装目录。直接回车时，客户端安装到当前目录的 `certd-client` 子目录；再次执行同一命令会更新已有客户端。
 
 ### Linux 和 macOS
 
 ```bash
-curl -fsSL https://raw.atomgit.com/certd/certd-client/raw/main/scripts/install.sh | sh
+curl -fsSL https://raw.githubusercontent.com/certd/certd-client/main/scripts/install.sh | sh
 ```
 
 ### 确认安装

scripts/install.ps1

@@ -13,10 +13,21 @@ if (-not $InstallDir) {
     $InstallDir = if ($inputDir) { $inputDir } else { $defaultDir }
 }
 
-$architecture = switch ([System.Runtime.InteropServices.RuntimeInformation]::OSArchitecture.ToString()) {
-    "X64" { "amd64" }
-    "Arm64" { "arm64" }
-    default { throw "不支持的 CPU 架构：$([System.Runtime.InteropServices.RuntimeInformation]::OSArchitecture)" }
+$processorArchitecture = $env:PROCESSOR_ARCHITEW6432
+if (-not $processorArchitecture) {
+    $processorArchitecture = $env:PROCESSOR_ARCHITECTURE
+}
+$architecture = switch -Regex ($processorArchitecture) {
+    "^(AMD64|X64)$" { "amd64" }
+    "^ARM64$" { "arm64" }
+    default {
+        if ([Environment]::Is64BitOperatingSystem) {
+            "amd64"
+        }
+        else {
+            throw "不支持的 CPU 架构：$processorArchitecture"
+        }
+    }
 }
 $asset = "certd-client-windows-$architecture.zip"
 $githubUrl = "https://github.com/$repository/releases/latest/download/$asset"

scripts/install_links_test.ps1

@@ -0,0 +1,18 @@
+$ErrorActionPreference = "Stop"
+
+$readmePath = Join-Path $PSScriptRoot "..\README.md"
+$readme = [System.IO.File]::ReadAllText($readmePath, [System.Text.Encoding]::UTF8)
+
+if ($readme -match "raw\.atomgit\.com") {
+    throw "README must not use raw.atomgit.com: it does not serve install scripts."
+}
+
+if ($readme -notmatch "https://raw\.githubusercontent\.com/certd/certd-client/main/scripts/install\.ps1") {
+    throw "README must provide the GitHub PowerShell install script URL."
+}
+
+if ($readme -notmatch "https://raw\.githubusercontent\.com/certd/certd-client/main/scripts/install\.sh") {
+    throw "README must provide the GitHub Shell install script URL."
+}
+
+Write-Host "Install link check passed"

scripts/install_test.ps1

@@ -4,12 +4,20 @@ $scriptPath = Join-Path $PSScriptRoot "install.ps1"
 $bytes = [System.IO.File]::ReadAllBytes($scriptPath)
 
 if ($bytes.Length -ge 3 -and $bytes[0] -eq 0xEF -and $bytes[1] -eq 0xBB -and $bytes[2] -eq 0xBF) {
-    throw "install.ps1 不能使用 UTF-8 BOM，否则 irm | iex 会将 BOM 作为脚本首字符并解析失败"
+    throw "install.ps1 must not use a UTF-8 BOM because irm | iex treats it as the first script character."
 }
 
 $content = [System.Text.Encoding]::UTF8.GetString($bytes)
 if (-not $content.StartsWith("[CmdletBinding()]")) {
-    throw "install.ps1 必须以 [CmdletBinding()] 作为首个字符，确保可通过 irm | iex 运行"
+    throw "install.ps1 must start with [CmdletBinding()] for irm | iex."
 }
 
-Write-Host "install.ps1 编码检查通过"
+if ($content -match "RuntimeInformation\]::OSArchitecture\.ToString") {
+    throw "install.ps1 must not rely on RuntimeInformation.OSArchitecture because older Windows/.NET can return null."
+}
+
+if ($content -notmatch "PROCESSOR_ARCHITEW6432") {
+    throw "install.ps1 must support architecture detection from 32-bit PowerShell on 64-bit Windows."
+}
+
+Write-Host "install.ps1 checks passed"