/**
 * Automatic unattended security/system updates, mirroring Forge's scheduled
 * maintenance. Installs `unattended-upgrades` and enables the daily APT
 * auto-update timers so security patches land without manual intervention.
 */
/**
 * Build the commands that enable automatic security updates. Idempotent.
 * Returns `[]` when disabled.
 */
export declare function buildAutoUpdatesScript(enabled?: boolean): string[];
