notepat: the background update path now ONLY checks the version and speaks 'system update available' — removed the dead silent download/flash/reboot state machine + startAutoUpdateDownload. All installs are user-initiated via the OS panel. (A self-flashing reboot is too risky to run unattended.) flash-mac.sh: size the ESP (ACEFI) for TWO copies of the boot tree (STAGE_MB*2 + 256, was STAGE_MB + 96). The on-device OTA writes the new kernel+initramfs alongside the running ones before swapping, so the old one-copy headroom made on-device updates fail with 'ESP only has N MB free, needs M'. ACBOOT absorbs the ~600 MB out of its 29 GB. Applies on next flash.