FAQ: add SSH XS note to root access, add How do updates work?

index.html

@@ -3127,8 +3127,8 @@
                             Yes. Every agent lives in its own container with
                             full root SSH access. You can install packages,
                             modify configurations, run anything — it's your
-                            space. Manage your instance password directly from
+                            space. SSH XS is optional but available. Manage your
-                            the dashboard.
+                            instance password directly from the dashboard.
                         </div>
                     </div>
 
@@ -3436,6 +3436,16 @@
                             will be safe.
                         </div>
                     </div>
+
+                    <div class="faq-item">
+                        <button class="faq-question" onclick="toggleFaq(this)">
+                            How do updates work?
+                            <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="6 9 12 15 18 9" /></svg>
+                        </button>
+                        <div class="faq-answer">
+                            Each container is completely managed by the agent itself. We do not push any system or agent updates into the containers. Instead, we provide a prompt in the configuration menu that your agent can use to create its own cron job for updating the container and itself &mdash; giving you full control over when and how updates happen.
+                        </div>
+                    </div>
                 </div>
             </div>
         </section>