should_defer_startup_auto_update_for_resume

Return whether a resumed session is still in its update grace period.

The first resumed launch starts a fixed grace period. Later resumes do not extend it, so a resume-only workflow eventually follows the normal startup auto-update path. If the marker cannot be persisted, fail closed and run the update path rather than allowing an unbounded bypass.