feat(dist): Phase 2 — Package manager distribution via Chocolatey and Winget

[mendsec]

Overview

Implement Phase 2 package manager distribution for catnet CLI (catnet-io/catnet) via Chocolatey (choco) and Windows Package Manager (winget).

This phase was intentionally deferred from Phase 1 (Homebrew & Scoop) to address moderation friction, code signing requirements, and antivirus false-positive mitigation typical of network scanning utilities.

---

Planned Scope & Tasks

1. Chocolatey Package (chocolateys)

• Add chocolateys: block to .goreleaser.yml for generating .nupkg packages.
• Set up Chocolatey Community repository account & API key (CHOCOLATEY_API_KEY).
• Automate publication to Chocolatey Community Feed on new release tags.

2. Winget Manifests (winget)

• Add winget: block to .goreleaser.yml or configure winget-releaser action.
• Automate PR creation to microsoft/winget-pkgs for package identifier catnet-io.catnet.

3. Antivirus & Code Signing Prerequisites (Security / Moderation)

• Authenticode Code Signing: Evaluate obtaining an EV/OV code signing certificate to sign Windows binaries (catnet.exe) prior to distribution.
• VirusTotal Pre-submission: Establish pre-release scanning workflow to verify binaries against VirusTotal before submitting manifests to package managers.

---

Acceptance Criteria

• Chocolatey package .nupkg published and approved on community.chocolatey.org.
• Winget manifest published and approved on microsoft/winget-pkgs.
• Documentation updated in README.md and docs/installation.md with choco install catnet and winget install catnet-io.catnet.