An app was updated via the GUI on a SHC member. What exactly does the Splunkbase install do/check? What needs to be done to un-do any changes made? Is it just best to uninstall the app and redeploy from SHC deployer? Default/app.conf shows the old version number, which makes me think that the files weren't actually updated everywhere. Wondering the best route to proceed to fix the mistake.
It depends on the deployer push mode.
With the default "merge to default" mode you should be able to simply remove app/default and push it again from the deployer. There is one caveat though - the updated app might have simply behaved in a way unexpected by older version instances and - for example - generated different summaries or "upgraded" kvstore contents.
So it might not be that easy.