Production-safe Ubuntu maintenance orchestrator: runs daily apt security updates, tracks non-security updates across apt/npm/pnpm/brew with quarantine + auto-review, applies only approved updates, rotates logs/state, and generates clear 09:00 MSK Telegram reports (including what was actually installed).

生产环境安全的Ubuntu维护编排器：每日执行apt安全更新，通过隔离与自动审查追踪apt/npm/pnpm/brew中的非安全更新，仅应用已批准的更新，轮转日志与状态数据，并每日09:00生成清晰的Telegram报告（含实际安装内容）