feat: automate extension updates across Windows hosts

control-plane/test/diagnostics.test.ts

@@ -65,6 +65,10 @@ test('diagnostic request identifiers and paths are stable and query-safe', () =>
   assert.match(generated, /^[a-f0-9-]{36}$/u);
   assert.doesNotMatch(generated, /token/u);
   assert.equal(diagnosticRequestPath('/api/tasks/TASK-1?token=secret#fragment'), '/api/tasks/TASK-1');
+  assert.equal(
+    diagnosticRequestPath('/api/extension-updates/package/secret-bearer-token'),
+    '/api/extension-updates/package/:token'
+  );
   const startedAt = process.hrtime.bigint() - 2_000_000n;
   assert.ok(diagnosticDurationMs(startedAt) >= 1);
 });