Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.
Co-authored-by: Cursor <cursoragent@cursor.com>
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.
Co-authored-by: Cursor <cursoragent@cursor.com>