dcb3e27b23
- Catalog picks skip the raw-git ceremony: reviewed heading instead of the scare card, no force toggle, enable pre-checked; success toast offers 'Restart gateway' inline; missing-env warning deep-links to Tools & Keys. - plugins.manage list now carries catalog provenance (sidecar) + a backend- computed update_available; new 'update' action re-pins catalog installs to the current catalog SHA (non-catalog installs refused — CLI-owned). - Capabilities rows show tier chip + 'Update to <sha>' button; catalog picks for an already-current install are refused with a toast instead of the modal reopening. - Settings drift badge is now a button: opens the dual-target modal pre-filled (agent half only, sidecar repo+pin when present).