fix(web): explain why older connections cannot update servers#23374

fix(web): resolve update permission CI regressions

fix(web): avoid pairing hint during pending batch updates

Merge main into fix/issue-17034

refactor(web): reuse environmentSessionStatesAtom for Update all denial

test(web): add isolated update permission evidence fixture

fix(web): explain why server Update is unavailable and skip denied targets in Update all

test(web): reproduce issue 17034 server update permission denial

feat(server): webhook filters fan out over arrays with a [] path wildcard