feat(agent): add safe pack update scripts

manifest.json

@@ -1,6 +1,6 @@
 {
   "pack_id": "gewu-research",
-  "pack_version": "0.20.11",
+  "pack_version": "0.20.12",
   "manifest_version": "1.0.0",
   "status": "local-contract-and-checkpoint-bound-hosts-not-qualified",
   "execution": "existing-local-agent-host",
@@ -397,7 +397,7 @@
       "compatible_checkpoint_contracts": [
         "gewu.local-checkpoint@0.1.0"
       ],
-      "sha256": "c892ec1cc26670b2ecc6644ca3bed665569e9474e7b45f8d72a69abc3d9c73ce",
+      "sha256": "964fc6944b63e457855f558182cf3ab83c9c3bebc8fa6448087e3072a3f821d0",
       "hash_encoding": "utf8-no-bom-lf"
     },
     {
@@ -516,6 +516,6 @@
   "snapshot": {
     "algorithm": "sha256",
     "scope": "modules array serialized as UTF-8 JSON with sorted keys and compact separators",
-    "digest": "e9b1ea3991237382224500a01371f52bc137d4eb32d750a34d9176c456edca5a"
+    "digest": "54f6dd1e9fbb9b3e7dcf4de99d43df36dd06cd796afa65a510df5978e6cee6f5"
   }
 }