Description

• Feature
• Bug fix
• Code refactor
• Documentation

Install self-heal

• venv/executor/spoolman/AMU self-heal (truncated venv, asyncio deadlock, 3-leg provisioning race, one-shot-latch bug class)
• apt-list TTL refresh, pip version-check disabled, hostname unit, xinit quoting brick fix
• usb_max_current_enable=1 fleet-wide with verified write (read-only remount guard)
• install.sh shellcheck cleanup (0 remaining)
• bs-ensure-xauth.sh: regenerate cookie on stale hostname, not just when empty (fixes permanent post-rename crash loop)

Updater daemon

• Order the daemon after network-online.target: the boot poll was beating DNS, so a single transient miss hid every pending update for the full 1440 min interval (surfaced as "Spoolman is not updating")
• Re-poll every 5 min while any git fetch is failing, keyed on the fetch breaker rather than status errors (a skipped fetch reports healthy)
• Resync the UI on daemon restart; fix a monotonic() == 0.0 sentinel that skipped the first refresh
• Extract the shared git-step helper in service.py, widen local lint scope, resolve bandit findings, drop healthcheck scripts from the repo

Tests

• Unit: new coverage in test_service_unit.py, test_dbus_service_unit.py, test_updater_worker_unit.py.