feat: Add PATH shadowing detection and automatic PATH configuration

- Detect when system binaries shadow managed installations (e.g. cmdtest/yarn)
- Add comprehensive PATH validation for all package managers (rbenv, nvm, pyenv, cargo, uv, go)
- Implement automatic PATH fixing via 'make fix-path'
- Integrate PATH checks into audit workflow with clear warnings
- Add shadowing fields to tool payload for observability
- Create scripts/lib/path_check.sh library for PATH management

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: AI Assistant

Makefile.d/user.mk

@@ -126,3 +126,9 @@ auto-update-project: scripts-perms ## Update project dependencies (with confirma
 
 auto-update-all: scripts-perms ## Update system + user scopes (skip project)
 	SCOPE=all ./scripts/auto_update.sh update
+
+check-path: scripts-perms ## Check PATH configuration for package managers
+	@bash -c "source scripts/lib/path_check.sh && check_all_paths"
+
+fix-path: scripts-perms ## Fix PATH configuration issues automatically
+	@bash -c "source scripts/lib/path_check.sh && fix_all_paths"

catalog/bat.json

@@ -1,6 +1,6 @@
 {
   "name": "bat",
-  "install_method": "github_release_binary",
+  "install_method": "auto",
   "description": "A cat clone with syntax highlighting and Git integration",
   "homepage": "https://github.com/sharkdp/bat",
   "github_repo": "sharkdp/bat",
@@ -10,6 +10,31 @@
     "x86_64": "x86_64",
     "aarch64": "aarch64",
     "armv7l": "armv7"
-  }
-  ,"tags": ["core"]
+  },
+  "available_methods": [
+    {
+      "method": "github_release_binary",
+      "priority": 1,
+      "config": {
+        "repo": "sharkdp/bat",
+        "asset_pattern": "bat-.*-x86_64-unknown-linux-musl.tar.gz"
+      }
+    },
+    {
+      "method": "cargo",
+      "priority": 2,
+      "config": {
+        "crate": "bat"
+      }
+    },
+    {
+      "method": "apt",
+      "priority": 3,
+      "config": {
+        "package": "bat"
+      }
+    }
+  ],
+  "requires": [],
+  "tags": ["core"]
 }

catalog/fd.json

@@ -1,6 +1,6 @@
 {
   "name": "fd",
-  "install_method": "github_release_binary",
+  "install_method": "auto",
   "description": "A simple, fast and user-friendly alternative to find",
   "homepage": "https://github.com/sharkdp/fd",
   "github_repo": "sharkdp/fd",
@@ -11,5 +11,30 @@
     "aarch64": "aarch64",
     "armv7l": "armv7"
   },
+  "available_methods": [
+    {
+      "method": "github_release_binary",
+      "priority": 1,
+      "config": {
+        "repo": "sharkdp/fd",
+        "asset_pattern": "fd-.*-x86_64-unknown-linux-musl.tar.gz"
+      }
+    },
+    {
+      "method": "cargo",
+      "priority": 2,
+      "config": {
+        "crate": "fd-find"
+      }
+    },
+    {
+      "method": "apt",
+      "priority": 3,
+      "config": {
+        "package": "fd-find"
+      }
+    }
+  ],
+  "requires": [],
   "tags": ["core", "search", "file-utils"]
 }

catalog/ripgrep.json

@@ -1,6 +1,6 @@
 {
   "name": "ripgrep",
-  "install_method": "github_release_binary",
+  "install_method": "auto",
   "description": "A line-oriented search tool that recursively searches directories for a regex pattern",
   "homepage": "https://github.com/BurntSushi/ripgrep",
   "github_repo": "BurntSushi/ripgrep",
@@ -10,6 +10,31 @@
     "x86_64": "x86_64",
     "aarch64": "aarch64",
     "armv7l": "arm-unknown-linux-gnueabihf"
-  }
-  ,"tags": ["core"]
+  },
+  "available_methods": [
+    {
+      "method": "github_release_binary",
+      "priority": 1,
+      "config": {
+        "repo": "BurntSushi/ripgrep",
+        "asset_pattern": "ripgrep-.*-x86_64-unknown-linux-musl.tar.gz"
+      }
+    },
+    {
+      "method": "cargo",
+      "priority": 2,
+      "config": {
+        "crate": "ripgrep"
+      }
+    },
+    {
+      "method": "apt",
+      "priority": 3,
+      "config": {
+        "package": "ripgrep"
+      }
+    }
+  ],
+  "requires": [],
+  "tags": ["core"]
 }