Fix install security settings and improve firewall output

[tolgaergin]

The install security summary scanned source even when install-time-source-analysis was unset or false. Firewall verdict output also lacked clear package/action colors, aligned rows, and clickable report links.

Skip the summary's source scanner entirely when disabled. Keep registry insights, firewall checks, and explicit audits independent. Use LPM Firewall branding, red block rows, yellow warning rows, aligned › markers, and safe terminal report links. Warnings and monitor mode continue to allow installation.

Validation on Rust 1.94.0:

• Workspace build, all-target Clippy, formatting, dependency policy, and CI shell/npm helper checks passed.
• 6,300 non-CLI tests, 5,131 serial CLI unit tests, 99 CLI binary tests, and 456 affected workflow tests passed. An existing IPv6 listener timeout passed its targeted and full-group retries.
• Source-scan and firewall output regressions failed before their changes. Coverage includes settings, stores, caches, firewall modes, colors, singular/plural counts, and terminal-control sanitization.
• Real terminal checks passed for block/warn with color enabled/disabled. The reported small-deploy@0.0.5 case and cold/warm/up-to-date readiness smoke passed (debug build; no performance claim).

Documentation: lpm-dev/rust-client-docs#225

Bug finding totals: 1 received, 1 verified and fixed, 0 rejected, 0 externally blocked, 0 pending.

Generated by OpenAI Codex (GPT-6) using the Codex agent harness.