Tidy up of the installation flow.

Now uses the APK as the source of truth, which means more tolerant to the manifest’s actual URL changing between APK build and install times.
Tidies up after itself, so that the APK is deleted if the install is cancelled. The receiver is unregistered at the end of installation too.