fix(deps): always update Socket packages in update script (#85)

* refactor(dlx): simplify metadata schema to SRI format

- Use SHA-512 SRI format (sha512-<base64>) for integrity field
- Remove redundant platform/arch/libc fields from metadata
- Remove global manifest writes for binaries (per-directory only)
- Add update_check field for version tracking
- Unify schema across binary/stub/package types

* fix(deps): always update Socket packages in update script

The update script was only updating @socketsecurity/* packages when
--apply flag was passed. This meant newly released Socket packages
within taze's 7-day maturity period were being skipped during regular
updates.

Now Socket packages are always updated to bypass the maturity period,
ensuring teams get the latest Socket packages immediately.

Author: jdalton

scripts/update.mjs

@@ -49,40 +49,38 @@ async function main() {
       process.stdout.write('\r\x1b[K')
     }
 
-    // Always update Socket packages when applying (bypass taze maturity period).
-    if (apply) {
-      if (!quiet) {
-        logger.progress('Updating Socket packages...')
-      }
+    // Always update Socket packages (bypass taze maturity period).
+    if (!quiet) {
+      logger.progress('Updating Socket packages...')
+    }
 
-      const socketResult = await spawn(
-        'pnpm',
-        [
-          'update',
-          '@socketsecurity/*',
-          '@socketregistry/*',
-          '@socketbin/*',
-          '--latest',
-          '-r',
-        ],
-        {
-          shell: WIN32,
-          stdio: quiet ? 'pipe' : 'inherit',
-        },
-      )
+    const socketResult = await spawn(
+      'pnpm',
+      [
+        'update',
+        '@socketsecurity/*',
+        '@socketregistry/*',
+        '@socketbin/*',
+        '--latest',
+        '-r',
+      ],
+      {
+        shell: WIN32,
+        stdio: quiet ? 'pipe' : 'inherit',
+      },
+    )
 
-      // Clear progress line.
-      if (!quiet) {
-        process.stdout.write('\r\x1b[K')
-      }
+    // Clear progress line.
+    if (!quiet) {
+      process.stdout.write('\r\x1b[K')
+    }
 
-      if (socketResult.code !== 0) {
-        if (!quiet) {
-          logger.fail('Failed to update Socket packages')
-        }
-        process.exitCode = 1
-        return
+    if (socketResult.code !== 0) {
+      if (!quiet) {
+        logger.fail('Failed to update Socket packages')
       }
+      process.exitCode = 1
+      return
     }
 
     if (result.code !== 0) {