An origin/main merge brought back main's live implementations where this
branch had retirement shims: psutil_android (download + extract), the
dashboard_procs concurrent-shim scan, and update_cmd_windows reaching the
holder scan through hermes_cli.main's retired alias. An already-running
pre-PM updater must hand off to the fresh child, never resume its ladder.
Post-update dashboard cleanup is isolated like its siblings (#112604), and
the holder-retirement probes assert the hand-off through the fresh-child
seam instead of a bare SystemExit(0).
hermes_cli/psutil_android carried its own tar path-traversal / link-member
guard (a 0.87 copy of archive_safe.safe_extract_targz). One guard for every
tar.gz we extract; the installer keeps raising PsutilAndroidInstallError so
its callers' except clauses are unchanged.
Behavior change: the psutil path now also rejects Windows-absolute and
backslash-smuggled member names (archive_safe.normalize_archive_parts), and
chmod failures on extracted files are suppressed identically.
