fix(updaters): isolate popup and settings process requests (#507)

Plasma shares executable sources across DataSources. Local counters restart
in each controller, so concurrent popup refreshes or settings requests could
reuse another process and receive its older result.

Generate a fresh request identity in each one-shot QML owner and quote it in
the pure command builder, preserving numeric serials and lifecycle guards.
Keep the continuous configuration watcher deliberately shared.

Paired real-engine regressions reproduce and prevent the duplicate result
on eight updater/refresh paths; test independent notifications and quoting.
Update Unreleased, usage and development. No CLI contract or config changes.

Verified head 0d8184b against fb6a4b1: strict CI checks, package, popup smoke,
panel matrix, pr-title and CodeQL pass. No inline review findings remain.
d416ed9e6aSimone committed on 10/14/2026, 11:20:20 AM· committed by GitHubparentfb6a4b1
23 files changedLine totals unavailable