- _live_gateway_pids_from_fleet moved to update_cmd_fleet_verify (no shim: internal path). - The takeover fixture stubs hermes_constants; write_handoff now resolves the ROOT home, so the stub provides get_default_hermes_root too. - The PATH-scoped npm lookup moved from build_update_products into _build_desktop_product: rename its resolution-allowlist row (same site, same reason).