this has many advantages: * easy to deliver the updateInfo via the apps object * after updating, the task can clear it * when apps are deleted, the info is automatically gone otherwise, it's a mess of deps between apps/updater/apptask/rest routes box update info is still in a file