Group selectable updates by device and keep versions below their titles.
Carry the per-update resume choice through saved plans, native installs,
and server recovery without changing saved continuation settings.

Require backend acknowledgement before a resume-off restart. Preserve
legacy installs and refuse unsupported hosts, including running WSL.
Discard stale policy messages and avoid update storage reads while idle.