Add owner update terminal jobs with durable replay

Closed
TE
18d ago
+3448-55

Agent updates can now run on the selected machine and return a durable terminal receipt. Rust validates the update plan, machine and session, then replays the original receipt for retries using the same intent key. Swift starts and observes the job.

Validation: the native daemon job passes 24 cases, including execution, exit status and replay after restart. Three Swift suites and the native formatting, clippy, compilation and seven-test gate pass.

UI adoption is separate. App callers remain unsupported; uncertain execution remains indeterminate. Stacked on #21402.

Changelog

Added: Agent updates return durable terminal receipts from the selected machine.