bump deps
simplify shut-down logic
specify now-required app bits download uri
use cmdtest expect to fix race
use a pipe instead of buffer for stager log
run with -race