Warn when update readiness includes v5 agents and document the trusted-transport first hop.
Surface server upgrade readiness on update plans so v5 agent continuity and agent token scope issues are checked before install.