fix: 'occured' -> 'occurred' in installer error and rlog script

[SAY-5]

Fix 2 user-visible error messages:

• internal/receiver/scriptedinputsreceiver/scripts/rlog.sh line 59: Error stderr message from auditd probe
• packaging/installer/install.ps1 line 521: .NET instrumentation installer download error

String-literal-only change.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 31.38%. Comparing base (040682b) to head (d5aed98).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7446   +/-   ##
=======================================
  Coverage   31.38%   31.38%           
=======================================
  Files         318      318           
  Lines       22936    22936           
=======================================
  Hits         7199     7199           
  Misses      14904    14904           
  Partials      833      833           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dmitryax]

@SAY-5 thanks for the contribution. Can you please sign the Splunk Contributor License Agreement (CLA)?

[SAY-5]

Thanks @dmitryax. This is a low-stakes typo-only PR (occurred spelling in two operator-facing strings), so rather than go through the Splunk CLA process for a sub-1-line delta, I'll defer to the team on whether to adopt it as part of an in-house batch. Happy to close if that's cleaner; leaving open in case it's easier to merge from here. Sorry for the noise.

[SAY-5]

Closing — typo-only PR. Multiple maintainers across the OSS ecosystem have flagged my recent typo-sweep PRs as AI-generated spam (notably hashicorp/nomad#27855, hashicorp/hcl#794, argo-cd reviewers). I should have caught this pattern sooner. Apologies for the noise.