Run Settings and palette agent updates on their captured owner
Merged
TE
17d ago+2032+2032+0123456789012345678901234567890123456789-125-125-012345678901234567890123456789
Settings and palette agent updates now create terminal jobs on their captured machine and session through one shared handler. Rust validates the command; the handler preserves the intent key and refuses scripts and App callers.
Settings shows receipts and exit outcomes, and blocks another update while the outcome is unsettled. Intent retention is currently in memory.
Validation: three fleet suites, nine web tests and TypeScript checks pass; regressions fail before the fix. Status messages cover 21 locales. Existing localization and package-group checks still fail.
Stacked on #21439.
Changelog
Changed: Settings and palette agent updates run on the selected machine with visible outcomes.