fe9d8ba55a
Cursor can republish the same semver with a new build; the updater previously skipped prefetch when the version matched, leaving stale sha256 values. In CI, always re-prefetch and commit when flake.nix drifts.