feat(updating): add automatic version checks for security tools

Checks for new zizmor and SFW releases, respects pnpm
minimumReleaseAge cooldown for third-party tools, updates
embedded checksums. Also adds Claude Code version sync phase.

Author: jdalton