Safe self-update: health-check + auto-rollback

Verify the new build boots before committing; auto-restore the previous version on a crash loop so an update can never take the Panel down.

Added

2 July 2026

Finished

29 August 2026