jenkins: add isolated Lesavka installer qualification

services/jenkins/configmap-jcasc.yaml

@@ -283,6 +283,28 @@ data:
               }
             }
           }
+          pipelineJob('lesavka-installer-tests') {
+            description('Isolated installer userspace contracts on Atlas. Mapped disposable root, private network/PID/mounts; no host devices or deployment. Probe-only runs are not installer passes.')
+            parameters {
+              stringParam('EXPECTED_SOURCE_REVISION', '', 'Exact reviewed Lesavka source commit.')
+              booleanParam('PROBE_ONLY', false, 'Only verify the mandatory isolation boundary.')
+            }
+            definition {
+              cpsScm {
+                scm {
+                  git {
+                    remote {
+                      url('https://scm.bstein.dev/bstein/lesavka.git')
+                      credentials('gitea-pat')
+                    }
+                    // Temporary qualification ref preserves the ordinary replay.
+                    branches('*/dev-phone-companion-ci-installer-qualification')
+                  }
+                }
+                scriptPath('docker/Jenkinsfile.installers')
+              }
+            }
+          }
           pipelineJob('lesavka') {
             // Re-enable after the pinned worker and current source are qualified.
             disabled(true)