Self Update
Update Agent Zero deliberately, with a backup path available before anything changes.
Self-update is currently available only in dockerized installs.
Update notifications
Check for newer releases quietly. Toasts are intentionally rate-limited; the update status here stays visible.