Checks a managed AI_ONBOARD installation for package updates, fixes, and security releases, reports drift separately from available releases, and offers a safe preview before applying an upgrade. Use when the user asks whether AI_ONBOARD is current, invokes the update-check workflow, or wants to review and apply an available bundle update.