more control over plugin updates

currently, plugin updates are checked daily (or whatever the plugin repository's snapshot policy is), and new versions downloaded automatically.

The user needs more control:

• prompting for updates
• ability to stick to a particular version
• ability to check on different intervals than snapshots (probably default to never, and use a --update-plugins clie or something)