feat/core-upgrades-that-roll-back
main
The controller says a rollback as rolled-back and asks the bus machine's backup holder for a snapshot before the planned bus step; the installer's first user list must grant both, or a fresh mesh's controller is refused the first time it uses them.