changed to incubator

added new install script
updated security
updated ETA

docs/deployment.md

@@ -19,7 +19,8 @@ curl -fsSL https://forgejo.digital-droplets.de/philschlo/incus-backup-ui/raw/bra
 
 Useful installer environment variables:
 
-- `INSTALL_DIR`: install location, default `/opt/incus-backup-ui`.
+- `INSTALL_DIR`: install location, default `/opt/incubator`.
+- `LEGACY_INSTALL_DIR`: old install location used for `.env` migration, default `/opt/incus-backup-ui`.
 - `INCUS_BACKUP_REPO_URL`: Git repository URL.
 - `INCUS_BACKUP_BRANCH`: Git branch, default `main`.
 - `API_TOKEN`: explicit agent token. If omitted, the installer generates one and prints it once.
@@ -71,6 +72,22 @@ sudo systemctl enable --now incus-backup-agent
 sudo journalctl -u incus-backup-agent -f
 ```
 
+The installer uses Git sparse-checkout and only checks out agent-related paths: `agent/` and `deploy/`.
+When upgrading from the old default path, it copies an existing `/opt/incus-backup-ui/agent/.env` or `/opt/incus-backup-ui/backend/.env` into `/opt/incubator/agent/.env` if the new env file does not exist yet.
+
+The installer also installs a small operational CLI:
+
+```bash
+sudo incubator update
+sudo incubator status
+sudo incubator logs
+sudo incubator doctor
+sudo incubator restart
+sudo incubator env
+```
+
+Use `update` for normal agent updates. It pulls the configured branch, installs dependencies, refreshes the systemd unit, and restarts the agent.
+
 ## Management API
 
 Run this on the management server: