- Update everything no longer calls the backend updater when the backend already reported supported=false (managed container, commit build); it surfaces the backend's own reason and still runs the client leg. - A command-less backend refusal is titled "Can't update from here" instead of "Update from your terminal" (all locales).