Use `console` permission for /updateserver rather than `hotpatch`

This is mainly because there is a chance (however small) that dealing
with the result of /updateserver will require shell access to the
server. There's also a race condition when two people update at once
when there are changes to the working directory or index, and limiting
this to the `console` permission will help avoid that.