fix(extensions/netboot): always clean up remote rootfs archive on tar failure

The remote shell ran with `set -e`, so a tar failure (disk full on the
NFS export, archive corruption, etc.) exited the shell before the
`rm -f` and left a 200-800 MB rootfs archive in /tmp. Repeated failed
deploys accumulate.

Restructure to: mkdir && tar; capture rc; rm -f unconditionally; exit
with the captured rc so Armbian's set -e still aborts on the real
failure.

Reported by coderabbitai (#9656 review, line 438).

Assisted-by: Claude:claude-opus-4.7

Author: iav

extensions/netboot/netboot-deploy.sh

@@ -432,10 +432,16 @@ function netboot_artifacts_ready__deploy_to_remote_server() (
 		# for SELinux contexts, and --numeric-owner so user/group resolution
 		# uses the archive's numeric IDs (the target's /etc/passwd is what
 		# matters at boot, not the deploy host's).
+		# Cleanup of the staged archive must run regardless of mkdir/tar
+		# outcome — without that, a `set -e` shell on the remote exits on
+		# tar failure and leaves the 200–800 MB rootfs archive under /tmp.
+		# `&&` keeps mkdir→tar short-circuit; capture the rc, run rm
+		# unconditionally, propagate the original rc so Armbian's set -e
+		# still aborts on the real failure.
 		run_host_command_logged_raw ssh "${ssh_opts[@]}" "${NETBOOT_DEPLOY_SSH}" \
-			"set -e; ${sudo_prefix}mkdir -p ${q_nfs_path}; \
-			 ${sudo_prefix}tar -xp --numeric-owner --xattrs --xattrs-include='*' --acls --selinux -f ${q_remote_archive} -C ${q_nfs_path}; \
-			 rm -f ${q_remote_archive}"
+			"${sudo_prefix}mkdir -p ${q_nfs_path} \
+			 && ${sudo_prefix}tar -xp --numeric-owner --xattrs --xattrs-include='*' --acls --selinux -f ${q_remote_archive} -C ${q_nfs_path}; \
+			 ret=\$?; rm -f ${q_remote_archive}; exit \${ret}"
 	else
 		display_alert "${EXTENSION}: no archive" \
 			"ROOTFS_EXPORT_DIR path — builder writes directly, skip" "info"