Installed skills had no way to surface a new release, so users stayed
on old versions silently. Add a quiet daily update check that every
skill and the dispatcher run before starting work.
The check reads the public VERSION on the default branch, compares it
to the version stamped into the shipped setup-rule.sh, and prints one
line only when a strictly newer release exists. It runs at most once a
day via a shared cache marker, sends no data (a read-only GET), and
fails silently when offline, sandboxed, or without curl, so it never
blocks the actual task.
VERSION is unchanged, so the check stays dormant until the next
release is tagged.
packaging.allowlist listed scripts/check-routing-drift.sh, a leftover from a
rename; only scripts/check_routing_drift.py exists. The default-deny allowlist
should not carry entries that can never match.