Update @socketsecurity/lib to v5.10.0 and adapt to new API

- Updated downloadSocketBtmRelease to new signature (tool as first parameter)
- Extract tool from config object and pass separately

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: jdalton

packages/cli/scripts/download-assets.mjs

@@ -119,7 +119,9 @@ async function downloadAsset(config) {
     // Download the asset.
     let assetPath
     try {
-      assetPath = await downloadSocketBtmRelease(download)
+      // Extract tool name from download config.
+      const { tool, ...downloadOptions } = download
+      assetPath = await downloadSocketBtmRelease(tool, downloadOptions)
       logger.info(`Downloaded to ${assetPath}`)
     } catch (e) {
       // Some assets are optional (models).

pnpm-lock.yaml

@@ -35,7 +35,7 @@ catalog:
   '@socketregistry/packageurl-js': 1.3.5
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 5.9.1
+  '@socketsecurity/lib': 5.10.0
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 3.4.1
   '@types/adm-zip': 0.5.7