windows-updates: EOL heuristics: now it's run once, in Project's constructor and reads both smart.lock and smart.json