v1.60.3

Internal v2 groundwork: the neutral update-orchestration helpers (major-bump detection, per-container update policy, cooldown, group-dependents restart, name/version formatting) move from the Telegram bot onto the UpdateEngine, each with a thin passthrough on the bot. Behaviour and message wording are byte-for-byte unchanged; full test suite green. Continued step-by-step move of update logic off the bot so a second interface can share it.