Promote 0.1.14 to the current stable Walter On-Prem release
Fix Walter's generated internal-tls CA certificates so Go-based walter-agent builds accept them during bootstrap and WebSocket TLS verification
Fix Linux turf bootstrap to elevate through sudo for system installs instead of silently falling back to ~/.walter when /opt/walter is not writable
Operator notes
bin/walter-onprem upgrade now resolves to 0.1.14 for existing 0.1.x installs
No database migration step or bundle refresh is required for this release
After upgrading Walter, regenerate turf bootstrap commands before reconnecting affected internal-tls agents so they pick up the fixed bootstrap script and CA material