feat: expand tool installer with 20+ pip/npm/cargo installable tools (#67, #68)

Add: pip-audit, bandit, safety, black, isort, pyright, pylint, flake8,
coverage, pre-commit, nbstripout, tox, eslint, prettier, jest, vitest,
cargo-audit, govulncheck to KNOWN_TOOLS registry.

All tools specsmith references in CI configs are now installable via
specsmith tools install <name>.

Closes #67, #68

Co-Authored-By: Oz <oz-agent@warp.dev>

Author: tbitcs

.specsmith/chat/chat-2026-04-09T14-47-21.jsonl

@@ -0,0 +1,7 @@
+{"role":"agent","text":"Starting a new session protocol...\n\nFirst, I'll sync the latest changes from the repository.\n\nRunning `sync` now.\n","ts":"2026-04-09T20:36:02.235Z"}
+{"role":"tool","text":"✓ Already up to date.","name":"sync","ts":"2026-04-09T20:36:05.697Z"}
+{"role":"agent","text":"The project is already up to date. No new updates to pull.\n\nNext, let's run an audit to ensure governance health and file integrity:\n\nRunning `audit`.\n","ts":"2026-04-09T20:36:17.515Z"}
+{"role":"tool","text":"[exit 1]\nAuditing C:\\Users\\trist\\Development\\BitConcepts\\specsmith\n\n  ✓ Required file AGENTS.md exists\n  ✓ Required file LEDGER.md exists\n  ✓ Governance file docs/governance/RULES.md exists\n  ✓ Governance file docs/governance/SESSION-PROTOCOL.md exists\n  ✓ Governance file docs/governance/LIFECYCLE.md exists\n  ✓ Governance file docs/governance/ROLES.md exists\n  ✓ Governance file docs/governance/CONTEXT-BUDGET.md exists\n  ✓ Governance file docs/governance/VERIFICATION.md exists\n  ✓ Governance file docs/governance/DRIFT-METRICS.md exists\n  ✓ Recommended file docs/REQUIREMENTS.md exists\n  ✓ Recommended file docs/TEST_SPEC.md exists\n  ✓ Recommended file docs/ARCHITECTURE.md exists\n  ✓ Recommended file CONTRIBUTING.md exists\n  ✓ Recommended file LICENSE exists\n  ✗ 3 REQ(s) without test coverage: REQ-OPT-011, REQ-OPT-012, REQ-OPT-013\n  ✓ LEDGER.md has 205 lines (within threshold)\n  ✓ 13 open, 4 closed TODOs\n  ✓ AGENTS.md: 76 lines\n  ✓ docs/governance/RULES.md: 76 lines\n  ✓ docs/governance/SESSION-PROTOCOL.md: 80 lines\n  ✓ docs/governance/LIFECYCLE.md: 44 lines\n  ✓ docs/governance/ROLES.md: 30 lines\n  ✓ docs/governance/CONTEXT-BUDGET.md: 62 lines\n  ✓ docs/governance/VERIFICATION.md: 43 lines\n  ✓ docs/governance/DRIFT-METRICS.md: 54 lines\n  ✓ CI config references expected verification tools for cli-python\n  ✓ Project type cli-python matches detected structure\n  ✓ Phase 🌱 Inception: 100% ready — run `specsmith phase next` to advance to \narchitecture\n\n1 issue(s) found (0 fixable). 27 checks passed.","name":"audit","ts":"2026-04-09T20:36:19.590Z"}
+{"role":"agent","text":"The audit completed with the following issues:\n\n- **3 requirements** lack test coverage: REQ-OPT-011, REQ-OPT-012, and REQ-OPT-013.\n\nAll other governance checks are passing. The project is ready to proceed to the next phase.\n\nWould you like me to address these uncovered requirements?","ts":"2026-04-09T20:36:31.718Z"}
+{"role":"user","text":"yes","ts":"2026-04-09T20:37:34.931Z"}
+{"role":"agent","text":"I will now work on addressing the uncovered requirements: REQ-OPT-011, REQ-OPT-012, and REQ-OPT-013.\n\nFirst, I'll list out what each of these requirements entails to ensure we cover all necessary aspects before writing tests.\n\nRunning `req_list` to get more details.\n","ts":"2026-04-09T20:37:45.770Z"}