fix(uninstall): tighten CLI app removal safety

Block vendor-managed security apps from generic uninstall and keep system remnants review-only while improving Dock, launch item, login item, and Homebrew cleanup checks.