Builds the older installer's tag-pinned --single-branch shape and asserts the check fetch materialises origin/main and reports the update instead of "not found on origin". Salvaged from #125132 (test only; the ls-remote probe it also added is not carried over). (cherry picked from commit 6f0133ab76a355c8d443e009012e726e41ab5673)