git tag v*
push the tag
release.yml
builds bundle
CDN
sudohomes.com/…
Pi · sudo-update.timer
hourly manifest check (jitter)
180s health gate
keep new version
auto-rollback
restore snapshot