fn write_download_only( out: impl Write, slot: Option<Slot>, entry: &BootEntry, prefix_len: usize, ) -> Result<()>
Helper function to render download-only lock status