pub fn run_self_update(args: &[String]) -> i32
Download a verified CLI release by default; –build explicitly selects Cargo. Both paths use the same staging validation and transactional replacement.