Propagate key-trust failures and let doctor --fix heal a keyless mirror line

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Kb7vDj6PHwymeDeSUUk1eX

bin/omarchy-cn-doctor

@@ -78,14 +78,16 @@ check_omarchy_repo() {
     echo "INFO omarchy-repo: 非 stable 通道，跳过 OmarchyCN 镜像检查"
     return 0
   fi
-  if cn_mirror_omarchy_repo_ok; then
+  # --fix runs the helper even when the line is present: it also heals a missing key
+  if [[ $fix == "true" ]]; then
+    if cn_mirror_omarchy_repo_fix && cn_mirror_omarchy_repo_ok; then
+      echo "PASS omarchy-repo: OmarchyCN 镜像行与 registry 公钥在位"
+      return 0
+    fi
+  elif cn_mirror_omarchy_repo_ok; then
     echo "PASS omarchy-repo: OmarchyCN 镜像行在位"
     return 0
   fi
-  if [[ $fix == "true" ]] && cn_mirror_omarchy_repo_fix && cn_mirror_omarchy_repo_ok; then
-    echo "PASS omarchy-repo: 已重新插入 OmarchyCN 镜像行"
-    return 0
-  fi
   echo "FAIL omarchy-repo: [omarchy] 缺 OmarchyCN 镜像行（omarchycn doctor mirror --fix 可修复）"
   failures=$((failures + 1))
 }