install.sh sets up a private virtualenv, the udev rule (group picked
automatically), and optionally a systemd user service (--service) and
LAN access with a subnet-limited firewalld/ufw rule (--lan). It records
what it changed so uninstall.sh can undo exactly that.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>