fix(telemetry): recover worker agent and Tailscale transport automatically

deploy/telemetry-plane/telegraf/Update-NdcMissionCoreTelegraf.ps1

@@ -67,6 +67,10 @@ if (-not ($serviceEnvironmentCandidate | Where-Object {
     )
 }
 
+$recoveryInstaller = Join-Path $PSScriptRoot 'Install-NdcMissionCoreTelemetryRecovery.ps1'
+if ($env:MISSIONCORE_MQTT_HOST -eq '127.0.0.1' -and -not (Test-Path $recoveryInstaller -PathType Leaf)) {
+    throw 'Telemetry recovery installer missing from bundle'
+}
 $temporaryRoot = Join-Path $env:TEMP "ndc-mission-core-telegraf-update-$([Guid]::NewGuid().ToString('N'))"
 $validationOutput = Join-Path $temporaryRoot "validation.out.log"
 $validationError = Join-Path $temporaryRoot "validation.error.log"
@@ -127,6 +131,10 @@ try {
         if ($LASTEXITCODE -ne 0) {
             throw "Failed to enable Telegraf recovery for non-crash failures"
         }
+        $recoveryTask = $null
+        if ($env:MISSIONCORE_MQTT_HOST -eq '127.0.0.1') {
+            $recoveryTask = & $recoveryInstaller -ExpectedNodeId $env:COMPUTERNAME -Action Apply | ConvertFrom-Json
+        }
     }
     catch {
         Stop-Service -Name $serviceName -Force -ErrorAction SilentlyContinue
@@ -155,6 +163,7 @@ try {
         ServiceName = $serviceName
         Status = (Get-Service -Name $serviceName).Status.ToString()
         RecoveryConfigured = $true
+        RecoveryTask = $recoveryTask
         Configuration = $configurationPath
         Backup = $backupPath
         PipelineCollector = $collectorPath