refactor(basics): use process.smol.mount() for VFS extraction

Replace node:sea.getAsset() with process.smol.mount() for extracting
socket-basics security tools (Python, Trivy, TruffleHog, OpenGrep) from
the VFS filesystem embedded in SEA binaries.

process.smol.mount() handles caching, locking, and extraction automatically,
simplifying the code and eliminating manual path management. The mount API
extracts files to its own managed cache directories and returns the paths.

Changes:
- Remove node:sea.getAsset() and createRequire imports
- Use process.smol.mount() for all tool extractions
- Simplify extractBasicsTools() by removing manual cache/lock logic
- Update validation to use paths returned by mount()
- Use logger.group/success for better output formatting

Author: jdalton