feat(audit): add outdated command and improve UX

Added three improvements:

1. Suppress make error messages during health checks:
   - Added 2>/dev/null to check-path, check-python-managers,
     check-node-managers in update target
   - Prevents noisy "make[1]: *** Error 1" messages while preserving
     script warning output

2. Add 'make outdated' command:
   - New CLI_AUDIT_FILTER_STATUS environment variable
   - Filters tools by status (NOT INSTALLED, OUTDATED, etc.)
   - Usage: make outdated shows only tools needing attention

3. Change not-installed tool color from red to blue:
   - Added BLUE ANSI color constant
   - NOT INSTALLED and UNKNOWN tools now display in blue
   - Less alarming than red for missing tools

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: CybotTM

Makefile.d/user.mk

@@ -27,6 +27,10 @@ audit-offline: ## Offline audit with hints (fast local scan)
 	@bash -c 'set -o pipefail; CLI_AUDIT_OFFLINE=1 CLI_AUDIT_RENDER=1 CLI_AUDIT_GROUP=0 CLI_AUDIT_HINTS=1 CLI_AUDIT_LINKS=1 CLI_AUDIT_EMOJI=1 $(PYTHON) audit.py | \
 	$(PYTHON) smart_column.py -s "|" -t --right 3,5 --header' || true
 
+outdated: ## Show only missing and outdated tools
+	@bash -c 'set -o pipefail; CLI_AUDIT_RENDER=1 CLI_AUDIT_GROUP=0 CLI_AUDIT_HINTS=1 CLI_AUDIT_LINKS=1 CLI_AUDIT_EMOJI=1 CLI_AUDIT_FILTER_STATUS="NOT INSTALLED,OUTDATED" $(PYTHON) audit.py | \
+	$(PYTHON) smart_column.py -s "|" -t --right 3,5 --header' || true
+
 audit-%: scripts-perms ## Audit single tool (e.g., make audit-ripgrep)
 	@bash -c 'set -o pipefail; CLI_AUDIT_RENDER=1 CLI_AUDIT_LINKS=1 CLI_AUDIT_EMOJI=1 $(PYTHON) audit.py $* | \
 	$(PYTHON) smart_column.py -s "|" -t --right 3,5 --header' || true
@@ -51,9 +55,9 @@ update: ## Collect fresh version data with network calls and update snapshot (~1
 	@echo "✓ Snapshot updated. Run 'make audit' or 'make upgrade' to use it." >&2
 	@echo "" >&2
 	@echo "→ Running system health checks..." >&2
-	@$(MAKE) check-path || true
-	@$(MAKE) check-python-managers || true
-	@$(MAKE) check-node-managers || true
+	@$(MAKE) check-path 2>/dev/null || true
+	@$(MAKE) check-python-managers 2>/dev/null || true
+	@$(MAKE) check-node-managers 2>/dev/null || true
 
 update-debug: ## Collect with verbose debug output (shows network calls)
 	@bash -c 'set -o pipefail; CLI_AUDIT_COLLECT=1 CLI_AUDIT_DEBUG=1 CLI_AUDIT_TIMINGS=1 $(PYTHON) audit.py --update --verbose' || true

audit.py

@@ -39,6 +39,7 @@
 COLLECT_MODE = os.environ.get("CLI_AUDIT_COLLECT", "0") == "1"
 RENDER_MODE = os.environ.get("CLI_AUDIT_RENDER", "0") == "1"
 JSON_MODE = os.environ.get("CLI_AUDIT_JSON", "0") == "1"
+FILTER_STATUS = os.environ.get("CLI_AUDIT_FILTER_STATUS", "")  # e.g., "NOT INSTALLED,OUTDATED"
 
 
 def normalize_version(version: str) -> str:
@@ -216,6 +217,11 @@ def cmd_audit(args: argparse.Namespace) -> int:
         selected = set(args.tools) if args.tools else None
         tools = render_from_snapshot(snapshot, selected)
 
+    # Apply status filter if specified
+    if FILTER_STATUS:
+        allowed_statuses = {s.strip().upper() for s in FILTER_STATUS.split(",")}
+        tools = [t for t in tools if t.get("status", "").upper() in allowed_statuses]
+
     # JSON output mode
     if JSON_MODE:
         # Enrich tools with additional fields for guide.sh compatibility
@@ -330,6 +336,7 @@ def cmd_update(args: argparse.Namespace) -> int:
                     GREEN = "\033[32m"
                     BOLD_GREEN = "\033[1;32m"
                     YELLOW = "\033[33m"
+                    BLUE = "\033[34m"
                     RED = "\033[31m"
                     RESET = "\033[0m"
 
@@ -346,9 +353,9 @@ def cmd_update(args: argparse.Namespace) -> int:
                         inst_color = YELLOW
                         latest_color = BOLD_GREEN
                         op = "⚠️"
-                    else:
-                        inst_color = RED
-                        latest_color = RED
+                    else:  # NOT INSTALLED, UNKNOWN
+                        inst_color = BLUE  # Blue for not-installed
+                        latest_color = BLUE
                         op = "?"
 
                     inst_display = inst if inst else "n/a"