fix: harden first-run install and clean reinstall

distribution/bin/erp-run

@@ -21,6 +21,7 @@ load_configuration() {
   INSTALLER_JAR="${ERP_INSTALLER_JAR:-$INSTALL_ROOT/installer/kaidi-erp-installer.jar}"
   PENDING_FILE="${ERP_INSTALL_PENDING_FILE:-$INSTALL_ROOT/state/install.pending}"
   INSTALL_LOCK_FILE="${ERP_INSTALL_LOCK_FILE:-$INSTALL_ROOT/state/install.lock}"
+  INSTALL_LOG_FILE="${ERP_INSTALL_LOG_FILE:-$(dirname "$PENDING_FILE")/install-formal.log}"
   HEALTH_URL="${ERP_HEALTH_URL:-http://127.0.0.1:${SERVER_PORT:-8091}/api/oa/health}"
   HEALTH_TIMEOUT_SECONDS="${ERP_INSTALL_HEALTH_TIMEOUT_SECONDS:-240}"
   HEALTH_POLL_SECONDS="${ERP_UPDATE_HEALTH_POLL_SECONDS:-2}"
@@ -98,10 +99,14 @@ run_pending_formal_application() {
   [[ "$HEALTH_POLL_SECONDS" =~ ^[1-9][0-9]*$ ]] || fail 'invalid health poll interval'
 
   say 'Starting the formal PostgreSQL application'
+  mkdir -p "$(dirname "$INSTALL_LOG_FILE")"
+  : > "$INSTALL_LOG_FILE"
+  chmod 600 "$INSTALL_LOG_FILE"
   "$JAVA_BIN" "${JAVA_OPTS[@]}" \
     -jar "$JAR_PATH" \
     --spring.profiles.active=postgres \
-    --server.port="${SERVER_PORT:-8091}" &
+    --server.port="${SERVER_PORT:-8091}" \
+    > >(tee -a "$INSTALL_LOG_FILE") 2>&1 &
   APP_PID=$!
   write_pid "$APP_PID"
 
@@ -118,6 +123,7 @@ run_pending_formal_application() {
       local status=$?
       set -e
       clear_pid "$APP_PID"
+      say "Formal application diagnostics: $INSTALL_LOG_FILE"
       fail "formal application exited before becoming healthy (status $status)"
     fi
     if curl -fsS --connect-timeout 2 --max-time 5 "$HEALTH_URL" >/dev/null 2>&1; then
@@ -137,6 +143,7 @@ run_pending_formal_application() {
   wait "$APP_PID"
   set -e
   clear_pid "$APP_PID"
+  say "Formal application diagnostics: $INSTALL_LOG_FILE"
   fail "formal application did not become healthy within ${HEALTH_TIMEOUT_SECONDS} seconds"
 }