Show in-cluster Radar upgrade status

[nadaverell]

Summary

Shows standalone in-cluster operators which Radar version is running, whether a newer release is available, and where to make the upgrade in Helm-, Argo CD-, or Flux-managed installations. When ownership cannot be verified, Radar links to safe installation-specific guidance instead of guessing.

What changed

In-cluster upgrade experience

• Adds the running Radar version to the Home cluster summary, with restrained emphasis based on the available version gap.
• Routes verified Helm, Argo CD, and Flux installations to the owning object. Suspected, unreadable, ambiguous, and unknown ownership falls back to the in-cluster upgrade guide.
• Removes the floating local-style update prompt from shared in-cluster and Cloud deployments. Local and Desktop behavior is unchanged.
• Expands the upgrade guide for native Helm, Argo CD, Flux HelmRelease, and Flux Kustomization workflows, including verification and rollback guidance.

Update checks

• Preserves the ordinary backend check and its existing mount-driven, one-hour cache behavior. Cloud continues to use a release-only lookup.
• Adds a bounded, best-effort daily browser-triggered check for standalone in-cluster Radar, with no retries.
• Excludes development and package builds while retaining explicit stable, prerelease, and custom build classification.
• Keeps the browser-triggered path isolated from the release-response cache so it cannot suppress or alter the ordinary backend check.

Testing

• make tsc
• make test
• make build
• Frontend: 66 files / 542 tests
• Focused update-check tests across the frontend and Go server/version packages
• Visual-test: skipped for this final simplification pass because the UI structure did not change

Deployment note

Deploy the paired receiver change before releasing this Radar change: https://github.com/skyhook-dev/marketing/pull/284

---

Note

Medium Risk
Changes outbound update telemetry classification and adds a new browser-triggered relay path, but scope is bounded (daily, in-cluster-only) and upgrade handoffs avoid acting on unverified GitOps ownership.

Overview
Standalone in-cluster Radar now surfaces the running version on Home, highlights available upgrades by gap (patch / minor / stale major), and routes operators to the right next step instead of a generic release popup.

Upgrade UX: The floating update banner is hidden for in-cluster and Cloud viewers; local/desktop behavior stays the same. Verified Helm releases and GitOps controllers (via new controllerRef on connect-self) can deep-link into the app; unknown or suspected ownership falls back to the expanded in-cluster upgrade docs (Helm, Argo CD, Flux, verify/rollback). Settings upgrade links point at those docs for in-cluster mode.

Update checks: Backend checks are keyed by source (release-only vs metered), single-flight cached, and tagged with build channel plus install timestamp when known. Development-shaped builds skip metered/browser relay traffic; Cloud /version-check uses release-only lookup. In-cluster browsers trigger one best-effort daily POST /version-check/browser relay (browser-proxy) that does not share the release-response cache with the normal check.

^{Reviewed by Cursor Bugbot for commit 2edc412. Bugbot is set up for automated code reviews on this repo. Configure here.}

[nadaverell]

bugbot run verbose=true

[cursor]

Bugbot request id: serverGenReqId_cf65f3da-96ea-4e27-b54b-1a96e6c19891

[cursor]

Bugbot rules debug

No rules were used for this review.

https://cursor.com/docs/bugbot#team-rules

Bugbot request id: serverGenReqId_cf65f3da-96ea-4e27-b54b-1a96e6c19891

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 9671e6f. Configure here.}

[nadaverell]

bugbot run verbose=true

[cursor]

Bugbot request id: serverGenReqId_5f954a7e-c60d-42f9-8e03-db877f9a0ecc

[cursor]

Bugbot rules debug

No rules were used for this review.

https://cursor.com/docs/bugbot#team-rules

Bugbot request id: serverGenReqId_5f954a7e-c60d-42f9-8e03-db877f9a0ecc

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ba9f4e7. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit e45f0d0. Configure here.}