feat(just): add 'update' recipe — system + nvim plugins + mason

New recipes (new 'Updates' section after 'Day-to-day'):
- update: pkg-update nvim-update
- pkg-update: paru -Syu
- nvim-update: nvim --headless +'lua require("config.update").run()'

New dot_config/nvim/lua/config/update.lua drives the headless session:
clean orphan plugins, vim.pack.update with force=true (skips the confirm
buffer since this is unattended; changes still go to nvim-pack.log),
then :MasonToolsUpdateSync — the blocking variant intended for headless

Interactive :PackSync stays unchanged (confirm buffer remains visible
for reviewed updates).

1 files changed, 47 insertions, 0 deletions

diff --git a/dot_config/nvim/lua/config/update.lua b/dot_config/nvim/lua/config/update.lua
new file mode 100644
index 0000000..72cb566
--- /dev/null
+++ b/dot_config/nvim/lua/config/update.lua
@@ -0,0 +1,47 @@
+-- Headless update orchestrator. Invoked from the justfile via:
+--   nvim --headless +'lua require("config.update").run()'
+--
+-- Cleans orphan plugins, applies plugin updates without prompting, then
+-- runs :MasonToolsUpdateSync (blocking variant intended for headless use).
+
+local M = {}
+
+local function say(msg)
+  io.stdout:write(msg .. "\n")
+  io.stdout:flush()
+end
+
+local function orphan_names()
+  return vim
+    .iter(vim.pack.get())
+    :filter(function(x)
+      return not x.active
+    end)
+    :map(function(x)
+      return x.spec.name
+    end)
+    :totable()
+end
+
+function M.run()
+  local orphans = orphan_names()
+  if #orphans > 0 then
+    say(
+      ("[pack] removing %d orphan(s): %s"):format(
+        #orphans,
+        table.concat(orphans, ", ")
+      )
+    )
+    vim.pack.del(orphans)
+  end
+
+  say("[pack] updating plugins…")
+  vim.pack.update(nil, { force = true })
+
+  say("[mason] updating tools…")
+  vim.cmd("MasonToolsUpdateSync")
+
+  vim.cmd("qa!")
+end
+
+return M