Refuse prerelease-shaped tags and explicit GitHub prerelease responses in the unattended stable updater before installer invocation. Add installability tests and proof routing for the auto-update prerelease refusal guard.
rcourtman