Updates

nitpub update              # check only
nitpub update --apply      # download Release binary, verify checksum, restart

Maintainer checkouts that rebuild from source: nitpub update --apply --from-source (runs deploy/update.sh).