Description
The updater calls StartAutoCheck(6*time.Hour, true) which sleeps first — no update check happens for 6 hours after start. When a new release is tagged, the running service sits on the old version until the next window.
This caused multiple rescue-mode deploys for v0.4.0 and v0.4.1.
Fix: perform one immediate check before entering the sleep loop:
```go
go func() {
checkAndApply() // immediate
for {
time.Sleep(interval)
checkAndApply()
}
}()
```
Note: this is a pattern in the shared updater library (hydrarelease/pkg/updater), so the fix should land there and benefit all services.