Add resumable desktop updates and typed reactive UI fixes

[trissim]

Summary

• add a GUI self-updater that saves canonical plate-manager source and typed ObjectState history, updates the exact virtual environment from an external worker, restarts, and restores the live session
• expose update checks through the typed main-window MCP action surface
• adopt typed color/key-sequence widgets, progressive form styling, repaired function-pattern editing, and compact annotated help from released external packages
• support plate-scoped registered functions without inventing a backend identity
• prepare OpenHCS 0.7.1 metadata and dependency floors

Architecture

• session source remains owned by the plate-manager code-document authority
• history persistence and materialization remain owned by ObjectState 1.1.0
• update execution is an argument-vector plan; no shell-string execution or parallel session schema
• the detached worker runs under the base interpreter outside the target environment, allowing Windows to replace active virtual-environment files
• UI actions reuse the existing typed provider/identity registry

Verification

• real installed GUI/MCP update: OpenHCS 0.6.99 -> 0.7.1, plate source restored, snapshot 2/5 restored, unsaved typed UIConfig value 17 restored
• 162 focused OpenHCS tests passed
• 154 architecture, mirror/deletion, registry, UI lifecycle, and release tests passed with declared GUI dependencies installed
• ObjectState 1.1.0: 161 local tests plus complete 3.11/3.12/3.13 Linux/macOS/Windows CI matrix
• OpenHCS wheel and sdist build and pass twine check
• public dependency-floor validation passes for every extracted package

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[augmentcode]

^{PR Risk Analyzer Agent🛡️}

👀 Human Input Needed
A pair-review briefing is ready for you.

→ Pair Review Briefing

[augmentcode]

^{Deep Code Review Agent🐛}

Review completed with 1 suggestions.

[augmentcode]

If _restart raises after the update command has already run, main exits without writing update-error.txt, so the GUI has already closed but the recovery flow never restarts and has no failure message to show. This leaves users with only the preserved session directory and no in-app path back to their restored work after a stale launcher path or missing restart executable.

Severity: medium

---

_{🤖 Was this useful? React with 👍 or 👎}