- Replace manual tag lookup + git clone/checkout with
fetch_and_deploy_gh_release (tarball mode) for both install and update
paths, matching repo convention (see ct/clickhouse.sh).
- Drop git, curl, ca-certificates from apt deps — base image ships them
and the helper no longer needs git.
- Remove the id -u etherpad guard; fresh LXC will not have the user.
- Bump Debian from 12 to 13 (trixie).
- Switch logo to selfh.st/icons webp.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>