pub fn check_update_enabled(trusted_public_keys: &[String]) -> bool
Prod only queries check-update with embedded public keys. Dev always queries; without keys it does not verify.