Revert "cmux-next updates: pulled-build banner (Wait for the Fix / Roll Back) from pulled.json"
Summary
Takes back #22896: it merged at c23f92b096cf without no SHIP review receipt on the head; no risk tier label.
Opened by merge-audit (leo-workspace tools/merge_audit.py), which never merges it. To keep #22896 instead, add the missing evidence for c23f92b096cf on #22896 (an independent review's Review (subagent, correctness first): SHIP at <head> comment, a green compile, a risk tier; for a compile the router skipped, land-now from a maintainer); the next audit pass then closes this PR. Otherwise review and land it.
Changelog
none
![View with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3.svg)
![Autofix with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark.svg)
Need help on this PR? Tag @codesmith-bot with what you need.
Summary by cubic
Reverts #22896 (pulled-build banner), which merged without a SHIP review or risk tier label. Macs on a nightly taken off the feed no longer see a "Wait for the Fix" / "Roll Back" update card, the nightly-next rollback workflow no longer writes pulled.json, and the pulled subcommand, the watch, and their tests are removed. Rollback to a kept build through updates.rollback is unaffected; pulled builds still keep the working build until a newer one publishes.