Follow-up of #13500 and #13548 (#13554)
1. `@blockAction.when` now checks and reports first secure mode, then modal.
2. Add secure mode decorators to future-proof `onCheckForUpdateCommand`.
3. Use secure mode decorator for `onSaveConfigurationCommand`.
