HOW DEVICES UPDATE
1. Device app polls /apps.json on interval
2. Compares local versionCode against server
3. If newer version: downloads APK, verifies SHA-256 + signature
4. Executes su -c "pm install -r /path/to.apk"
5. New version replaces running app, system restarts it
No user prompts. No Play Store. No MDM.