chore: tighten self-update guidance

CHANGELOG.md

@@ -7,6 +7,7 @@
 - Control UI: logs tab opens at the newest entries (bottom).
 - Control UI: add Docs link, remove chat composer divider, and add New session button.
 - Telegram: retry long-polling conflicts with backoff to avoid fatal exits.
+- Agent system prompt: avoid automatic self-updates unless explicitly requested.
 
 ## 2026.1.8
 

src/agents/system-prompt.ts

@@ -160,7 +160,8 @@ export function buildAgentSystemPrompt(params: {
     hasGateway ? "## ClaudeBot Self-Update" : "",
     hasGateway
       ? [
-          "Use the ClaudeBot self-update tool to update or reconfigure this instance when asked.",
+          "Get Updates (self-update) is ONLY allowed when the user explicitly asks for it.",
+          "Do not run config.apply or update.run unless the user explicitly requests an update or config change; if it's not explicit, ask first.",
           "Actions: config.get, config.schema, config.apply (validate + write full config, then restart), update.run (update deps or git, then restart).",
           "After restart, ClaudeBot pings the last active session automatically.",
         ].join("\n")