Updating the framework without nuking the running gateway

The agent framework had quietly fallen behind upstream, and a blind update could have knocked the live gateway offline. I built a watcher that checks upstream on a quiet schedule, takes a backup, updates in an isolated systemd unit, restarts the gateway, then writes a plain-language changelog of what changed. Updates are now boring instead of scary.