move Tailscale ahead of the command-line tools

Now section 6, with the tools at 7. No dependency in either direction: Tailscale
needs curl, which core utils installs at 5, and nothing in it touches lazydocker,
lazygit, starship or fastfetch.

Same reasoning as putting it early in the first place — it is a second way into
the machine, so it should exist before anything that can go wrong does, and
fetching four upstream binaries is a longer gap than it needs to sit behind.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

scripts/setup/machine-setup/machine-setup.sh

@@ -383,25 +383,7 @@ if ! skip; then
 fi
 
 # =============================================================================
-# 6. Command-line tools
+# 6. Tailscale
-# =============================================================================
-#
-# A different thing from core utils, and kept apart from them: upstream binaries
-# fetched from upstream, on their own release cadence, none of which the
-# distribution ships. Lumping them in made a run look like it was installing
-# system packages and then start pulling tarballs unannounced.
-
-step "Command-line tools"
-if ! skip; then
-  # shellcheck disable=SC2046  # word splitting is how the list is passed
-  tools_install "Command-line tools" $(tools_default)
-  summarise_last "Command-line tools"
-  step_ok
-fi
-
-
-# =============================================================================
-# 7. Tailscale
 # =============================================================================
 #
 # Placed here, before everything that can go wrong, because it is a second way
@@ -630,6 +612,24 @@ if ! skip; then
   step_ok
 fi
 
+# =============================================================================
+# 7. Command-line tools
+# =============================================================================
+#
+# A different thing from core utils, and kept apart from them: upstream binaries
+# fetched from upstream, on their own release cadence, none of which the
+# distribution ships. Lumping them in made a run look like it was installing
+# system packages and then start pulling tarballs unannounced.
+
+step "Command-line tools"
+if ! skip; then
+  # shellcheck disable=SC2046  # word splitting is how the list is passed
+  tools_install "Command-line tools" $(tools_default)
+  summarise_last "Command-line tools"
+  step_ok
+fi
+
+
 # =============================================================================
 # 8. Locale
 # =============================================================================