fix: preserve updater across systemd restart

install.sh

@@ -435,6 +435,8 @@ start_service() {
   fi
 
   if [[ "$PLATFORM" == "linux" ]]; then
+    # The updater shares this service cgroup and must outlive the Java process
+    # to verify the restarted release and roll back a failed health check.
     cat > /etc/systemd/system/kaidi-erp.service <<EOF
 [Unit]
 Description=Kaidi ERP
@@ -443,6 +445,7 @@ Wants=network-online.target
 
 [Service]
 Type=simple
+KillMode=process
 User=$ERP_USER
 Group=$ERP_GROUP
 Environment="ERP_INSTALL_ROOT=$INSTALL_ROOT"