Safety hardening for target-theme updates. The selected target is captured once and used for backup, install, and rollback. Missing targets now cancel safely instead of falling back to the active theme, and target changes are blocked while an update is running. Adds PHP 7.4 lint CI.