Require trusted page context for Settings agent updates
Merged
TE
18d ago+3753+3753+0123456789012345678901234567890123456789-70-70-01234567890123456789
Settings agent updates could reach the terminal handoff without a user gesture. Preserve the provider's trusted page context and require a real gesture or native confirmation for Update and Update All. Params cannot supply that authorization.
Validation: all four regression methods, including 13 parameter cases, pass on the fleet and fail before the fix. Swift syntax and scoped conventions pass. No localization keys changed; existing localization and package-group checks still fail.
Owner-bound job UI adoption is separate. Stacked on #21436.
Changelog
Fixed: Settings agent updates require a user gesture or native confirmation.