feat: choose updates and restart this device first#23870

fix(server): reject missing update checksums early

refactor(server): capture provider registry HTTP client

perf(server): overlap release archive and checksum downloads

perf(server): reuse fresh post-update provider discovery

perf(desktop): avoid duplicate WSL runtime checks

perf(client-runtime): overlap independent tool updates

perf(provider-core): share pending version lookups

perf(server): overlap provider update checks

fix(web): preserve provider update version intent

fix(desktop): drop removed update rollback targets

fix(server): explain resume policy load failures

fix(server): keep telemetry after failed policy ACKs

fix(web): clear expired update countdowns

fix(desktop): retain failed resume rollback requests

feat: control thread resume during updates

fix(web): protect update retries across renderers

chore: merge latest main into update flow

fix(web): keep update recovery and progress reliable

chore: merge main into the update flow

feat(web): select updates and restart this device first