fix: add dist/PVE-Tools.sh and missing cve-fix.sh to bootstrap

- Un-ignore dist/PVE-Tools.sh so it is available on GitHub raw for the
  bootstrap loader to download directly (faster single-file path).
- Add src/modules/09-security/cve-fix.sh to remote file list so the
  fallback per-module download path is complete.
- The bootstrap now has both download paths working.

.gitignore

@@ -4,7 +4,8 @@ node_modules/
 bun.lockb
 
 # Ignore build outputs
-dist/
+dist/*
+!dist/PVE-Tools.sh
 **/dist/
 build/
 out/

PVE-Tools.sh

@@ -124,6 +124,7 @@ pve_tools_entry_remote_files() {
         "src/modules/08-tools-about/self-update.sh"
         "src/modules/08-tools-about/sysinfo.sh"
         "src/modules/09-security/audit.sh"
+        "src/modules/09-security/cve-fix.sh"
         "src/modules/09-security/init.sh"
         "src/modules/09-security/ssh-hardening.sh"
         "src/modules/10-third-party/community.sh"