chore: weekly upstream bumps (2026-09-14)

[github-actions]

Automated weekly upstream bump.

• brook 20260101.0 -> 20270101
• ffuf 2.2.1 -> 2.3.0
• fish 4.9.2 -> 4.9.3
• fzf 0.74.3 -> 0.74.4
• gum 2.0.0 -> 2.0.1
• httpx 1.11.0 -> 1.12.0
• lazygit 0.65.0 -> 0.65.1
• spp 0.7 -> 0.8.0
• tor 0.4.9.11 -> 0.4.9.12
• vim 9.2.1037 -> 9.2.1099
• xxd 9.2.1037 -> 9.2.1099

Each binary was rebuilt from source in its Dockerfile
(build//Dockerfile), stripped and UPX-packed, then
smoke-tested on x64 and ARMv7 before landing here.

Reviewer checklist:

• spot-check one binary locally (./scripts/build.sh <tool> --extract)
• sizes look sane vs previous commit

Built by run 34830502089.