fix(clean): enhance orphan detection accuracy and safety

- Expand app scan to include Homebrew Cask and Setapp locations
- Add lsappinfo fallback for more reliable running app detection
- Add sensitive data protection patterns (1Password, Keychain, etc.)
- Add mdfind fallback with file-based caching (Bash 3.2 compatible)

lib/clean/apps.sh

@@ -157,10 +157,8 @@ readonly ORPHAN_NEVER_DELETE_PATTERNS=(
     "*keepass*" "*KeePass*"
     "*dashlane*" "*Dashlane*"
     "*enpass*" "*Enpass*"
-    "*credential*" "*Credential*"
-    "*token*" "*Token*"
-    "*wallet*" "*Wallet*"
     "*ssh*" "*gpg*" "*gnupg*"
+    "com.apple.keychain*"
 )
 
 # Cache file for mdfind results (Bash 3.2 compatible, no associative arrays)