v0.1.40

Bulletproof plugin updates + agent-send boot-race fix (DIVE-47)

Hardening pass on the recurring 'updates break things' class of bugs.

Plugin-update robustness:

• 5dive-refresh-plugins.sh prune now keeps the 2 newest versions per plugin (active + previous, KEEP_PLUGIN_VERSIONS), not just the active one — so a still-running agent that loaded the previous version doesn't get its plugin dir deleted out from under it (the 'Plugin directory does not exist' stop-hook failure).
• 5dive-refresh-plugins.sh --restart: after refreshing, deferred-restart only the agents whose plugin set actually changed, so the new code loads instead of waiting for the next launch. Self-restart-safe via systemd-run.
• 5dive doctor (channels): per-telegram-agent plugin-version drift check — if the on-disk plugin was updated after the agent's process started, it's running stale code; warns with a restart hint, or --repair schedules the restart. Detected via process-start vs manifest mtime (no memory introspection).

agent send/ask boot-race:

• 5dive agent send/ask now wait for the target's TUI input prompt before injecting keystrokes. A send during the ~15-30s boot window after a restart was silently dropped (message lost); now it waits (bounded 45s, ~0.3s no-op when already up).

Pairs with telegram plugin 0.4.50 (honest '~20-30s' restart-time copy across /restart /resume /update /model /account /effort).