usage: tautline install-cli [-h] [--bin-dir BIN_DIR] [--config-env CONFIG_ENV]
                            [--dry-run]
                            [--update-policy {signed,pinned,warn,unverified}]

options:
  -h, --help            show this help message and exit
  --bin-dir BIN_DIR
  --config-env CONFIG_ENV
  --dry-run             Print planned actions without changing anything.
  --update-policy {signed,pinned,warn,unverified}
                        Auto-update trust policy written to methodology.env.
                        Default 'pinned' pins the install commit; advance with
                        update-repin.
