Updates and licenses

Stable builds look for https://releases.halcyoncontrols.io/stable/latest.json. That file lives in R2, not on the API server, so an outage of the VPS does not stop updates. The bundles are signed with the Tauri updater key already in the app.

A CMDR subscription returns an hlc1 token. The app checks it with a public key compiled into the build, refreshes it about weekly, and keeps working for seven days after it expires if the refresh cannot reach the API.

Beta manifests are published the same way. Fetching the beta manifest from the API requires an active subscription.