feat(cli): confirm major-version jumps in mops self update

[Kamirus]

Same guard as #696, on the v3 line: a major jump in mops self update prints the release-notes link and asks for confirmation; non-interactive environments skip the update with a notice and exit 0 (erroring would break scripted updates the day a major ships), naming mops self update --major; an unparseable /tags/latest body is an error instead of an npm install spec. Same-major updates are unchanged.

#696 is what partially protects the 2.x→3.0 jump (client-side check, so only users who update into it get it). This one covers 3.x→4.x permanently.

Decision table in helpers/self-update-kind.ts with unit tests for the prerelease edges — 2.20.0 → 3.0.0-beta.1 prompts, 3.0.0-beta.1 → 3.0.0 does not, which matters while previews ship from this branch. Full v3 suite passes (26 suites, 265 tests, 75 snapshots).

🤖 Generated with Claude Code

[github-actions]

Cursor AI review

👍 APPROVE — looks safe to merge

Category	Assessment	Details
Summary	✅	Adds a major-version confirmation gate to mops self update (--major escape hatch, non-TTY skip-with-success, reject unparseable /tags/latest), with docs, changelog, and classifier unit tests.
Code Quality	✅	Decision table isolated in classifySelfUpdate; confirmation UX reuses the existing prompts/onCancel pattern from owner.ts/maintainer.ts; no speculative helpers.
Consistency	✅	--major naming matches mops update --major in cli.ts; --help, docs/docs/cli/6-self/01-mops-self-update.md, and ## 3.0.0 changelog entry stay aligned with the new behavior.
Security	✅	Traced update() → getLatestVersion() → npm/pnpm install of ${url}/versions/${latest}.tgz; invalid tags now process.exit(1) instead of being interpolated into the install URL; no auth/identity/integrity paths touched.
Tests	✅	cli/tests/self-update.test.ts covers the classifier decision table (same-major, major, prerelease edges, invalid tags); network/install wiring remains untested as before this PR. moduleNameMapper in jest.config.js only enables the .js import style used by the new test.
Maintainability	✅	Small pure helper with explicit SelfUpdateKind union; comments document the non-TTY success-exit contract that scripts rely on.

Verdict

Decision: APPROVE
Risk: Low
Reason: Contained CLI safety guard outside registry/install/auth paths; same-major updates unchanged, non-interactive scripts keep succeeding, and docs/changelog/--help match the intended behavior.

---

Generated for commit bb20004

[automation-sa-sre]

Automated approval: the AI review verdict for df0a374 is APPROVE. See the "Cursor AI review" comment for details.

[automation-sa-sre]

Automated approval: the AI review verdict for bb20004 is APPROVE. See the "Cursor AI review" comment for details.