Add agent update settings, pending self-update via poll, desired config per host, and automatic or manual SSH/WinRM fallback when agents do not report agent.update events.
Store domain admin in ui_settings (DB overrides env); qwinsta/logoff use effective config. Host card: POST /hosts/{id}/actions/winrm-test via pywinrm.
Co-authored-by: Cursor <cursoragent@cursor.com>