fix(ui): restore cursor and autowrap when install/migrate aborts

[indaco]

Description

Today, an early return or a panic between MultiProgress.init and its paired finish leaves the terminal with autowrap disabled and the cursor hidden until the user runs reset or stty sane. The visible cost is small but the surprise is real, since it can outlive the failing command.

This wires two complementary safety nets so the terminal is always handed back in a usable state:

• The install download phase now anchors MultiProgress.finish to scope exit, matching what migrate already does. Any error path or --quiet/dry-run early return between init and the worker join restores the cursor, instead of relying on the explicit call at the bottom of the block.
• A panic wrapper restores the same state before aborting. Defers do not run on panic, so a safety check tripping mid-install would otherwise still leak the DECRESET; this is the only path that closes that gap.

Related Issue

• None

Notes for Reviewers

• The release binary grows ~16 KB to make the panic wrapper possible (FullPanic over simple_panic);