Privacy disclosure status for an installed plugin

What the operator accepted at install, what the next upgrade would land (from the fetched upstream tip, else the listing, else the installed file), and whether the two differ in the keys that re-show the install dialog: the whole block minus summary and other (sends, collects, sensors, remoteAccess, systemChanges, closedCode); keys outside that list are ignored. Reads the already-fetched upstream tip; call POST /plugin/{RepoName}/updates first to fetch. An upgrade whose declaration changed is refused unless the request body carries {"privacyAccepted": <the pending block>}.