installAndResolve

Resolves a built binary for version (used as the cache key + baked into the binary so stig-code-analyzer --version reports it). First-call latency is the PhASAR+analyzer build; later calls with the same version return the cached binary.

Installation is protected by the same OS lock as direct native builds. A failed/interrupted build cannot publish a success marker.

No-arg overload for callers without a version in hand. Uses the same strict packaged version resolver as every Gradle plugin caller.