feat(just): add 'update' recipe — system + nvim plugins + mason

New recipes (new 'Updates' section after 'Day-to-day'):
- update: pkg-update nvim-update
- pkg-update: paru -Syu
- nvim-update: nvim --headless +'lua require("config.update").run()'

New dot_config/nvim/lua/config/update.lua drives the headless session:
clean orphan plugins, vim.pack.update with force=true (skips the confirm
buffer since this is unattended; changes still go to nvim-pack.log),
then :MasonToolsUpdateSync — the blocking variant intended for headless

Interactive :PackSync stays unchanged (confirm buffer remains visible
for reviewed updates).

1 files changed, 15 insertions, 0 deletions

diff --git a/justfile b/justfile
index 32ac2ba..ef7f8f4 100644
--- a/justfile
+++ b/justfile
@@ -20,6 +20,21 @@ sync: apply pkg-fix unit-apply
 apply:
     chezmoi apply -S .
 
+# ═══════════════════════════════════════════════════════════════════
+# Updates
+# ═══════════════════════════════════════════════════════════════════
+
+# Update everything: system packages, Neovim plugins, Mason tools
+update: pkg-update nvim-update
+
+# Upgrade all system + AUR packages
+pkg-update:
+    paru -Syu
+
+# Update Neovim plugins (vim.pack) and Mason tools in a headless session
+nvim-update:
+    nvim --headless '+lua require("config.update").run()'
+
 # Re-add changes from live files back into the repo; pass a path to target one, or omit for all
 re-add *paths:
     #!/usr/bin/env bash