packages: harden NetBSD dtail pipeline (review findings)

- Makefile: .SHELLFLAGS := -ec — with .ONESHELL a failing intermediate
  recipe line (remote pkg_create, scp, PV upload) previously did not
  stop the recipe and make exited 0; also remove stale /tmp package
  artifacts at target start so a failed build can never silently
  re-upload an old tgz, guard against an empty extracted version, and
  quote the tr operand
- dtail-netbsd.json.tpl + rc.d: move the SSH host key from volatile
  /var/run/dserver/cache to persistent /var/db/dserver/ssh_host_key so
  it survives reboots (clients re-accept the key once after upgrade)
- pkg-dtail-netbsd.sh: reject a missing version argument; write the
  pkg_summary via a temp file so a pkg_info failure cannot publish a
  truncated pkg_summary.gz; document that the dserver user/group is a
  deliberate manual install step
- key-cache template: comment now states the daily cron entry is added
  manually at install time (documented in the pkgrepo skill)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

0 files changed, 0 insertions, 0 deletions