Harden workstation tier handling

autoinstall/firstboot-setup.sh

@@ -399,10 +399,10 @@ python3 - <<'PY'
 import json, os, time
 
 # NOTE: install.sh (Phase 2) rewrites /opt/cezen/install-record.json after
-# this, using its own $TIER routing value ("starter" for Workstation) — this
-# is expected: provisioned_tier there reflects the Ansible profile actually
-# installed. The persistent Workstation marker is /opt/cezen/tier, not this
-# file, and install.sh never touches that marker.
+# this. For Workstation, it preserves category="workstation" and selected_tier
+# = "workstation", while provisioned_tier becomes "starter" to reflect the
+# Ansible profile actually installed. The persistent Workstation marker is
+# still /opt/cezen/tier, and install.sh never touches that marker.
 payload = {
     "schema": "cezen.install_record.v1",
     "customer_name": os.environ.get("CUSTOMER_NAME", "").strip(),