docs: note usage of UPDATE_DRYRUN