ipco-firstboot runs once after network-online.target, installs the configured
IPCO package list through apt, and writes /var/lib/ipco/firstboot.done only
after apt succeeds.

Default packages are configured in /etc/ipco/firstboot.conf through
IPCO_FIRSTBOOT_PACKAGES. Package names must be real packages published by the
configured apt source; this package deliberately does not add profile/meta
packages or model bootstrap logic.
