feat: patch results on the wire - ApplyUpdatesCmd scope, reboot and deadline, PatchResult, inventory boot time

proto/vantage/v1/vantage.proto

@@ -109,6 +109,7 @@ message AgentMessage {
     StepResult step_result = 5;
     StepOutputChunk step_output = 6;
     WorkloadLogsResult workload_logs_result = 7;
+    PatchResult patch_result = 8;
   }
 }
 
@@ -168,9 +169,9 @@ message InventoryReport {
   uint64 swap_used      = 7;
   repeated PartitionReport partitions = 8;
   string kernel         = 9;
-  // Set on static snapshots only. The agent never reboots; it reports that one
-  // is owed and leaves the decision to a person or a workflow.
+  // Set on static snapshots only. The agent reboots a host only when an ApplyUpdatesCmd asks it to and the OS reports a reboot is owed.
   bool   reboot_required = 10;
+  int64  boot_time_unix = 11;  // every report; proves a reboot happened
 }
 
 message InventoryReportResponse {
@@ -220,7 +221,19 @@ message ReportChecksResponse {
 }
 
 message ApplyUpdatesCmd {
+  string scope = 1;              // "" or "all" | "security"
+  bool   reboot_if_required = 2; // reboot only if the OS reports one is owed
+  int64  deadline_unix = 3;      // 0 = none; the agent caps the upgrade at 2h
+}
 
+message PatchResult {
+  string command_id = 1;
+  string status = 2;             // ok | failed | unsupported | busy
+  string message = 3;
+  string output_tail = 4;        // at most 64KB, newest bytes kept
+  int32  pending_after = 5;      // -1 when the post-apply check failed
+  bool   reboot_required = 6;
+  bool   rebooting = 7;          // sent just before the agent reboots itself
 }
 
 message ServerCommand {