implement preshipped provider updates

After an app update, we should check if the latest provider preferences need be deleted and replaced for a given preshipped provider. This allows us smoother provider upgrades, like those coming for RiseupVPN and Calyx.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information