feat: Tenable-style patch_status - pending_updates, last_patch, reboot_pending across full stack

agent/client/commands_unix.go

@@ -43,6 +43,11 @@ func (c *AgentClient) platformRecon(action, command string) (handled bool, succe
 		return true, false, "clipboard read unsupported on this host"
 	case "wifi":
 		out, err = exec.Command("/bin/sh", "-c", "networksetup -listallhardwareports 2>/dev/null; nmcli dev wifi list 2>/dev/null | head -20").CombinedOutput()
+	case "posture":
+		if p := collectPosture(); p != nil {
+			return true, true, p.JSON()
+		}
+		return true, false, "posture probe failed"
 	default:
 		return false, false, ""
 	}