[royashbrook]

what changed

• offline hush doctor, explicit public npm version check, CLI/skill/job version drift, and bounded backup-success evidence
• opt-in daily macOS update notifications with snooze/mute, per-version dedupe and separate backup-health notices
• portable Node command/report for other OS schedulers and agent integrations
• stable Node paths for all four new schedules
• preview/apply repair of existing jobs, optional explicit installation-path reconciliation, snapshot/rollback and running-job/drift refusal
• cold-user maintenance/upgrade guide and a PR test workflow

no automatic upgrades. existing installations and live backup jobs were left unchanged. this prepares 1.6.0, it is not published.

verification

• 21 maintenance gates pass locally, including native plist serialization with fake launchctl, notification failure/retry/dedupe, rollback and concurrent-edit preservation
• all four fake scheduler suites and all three fake sync suites pass
• packed npm cold install and both symlinked entrypoints work
• read-only doctor correctly distinguishes multiple installed versions, recognizes successful sync receipts, and checks live public registry metadata
• complete Linux suite passes in the PR workflow, including core storage and adoption through a disposable keyring: https://github.com/royashbrook/hush/actions/runs/34876623490

native Linux/Windows notification installers are not shipped. no live desktop notice or native launchd installation was performed in this change; OS calls in those tests are fakes. local reports and policy behavior are exercised end to end.

fix #23