Audit: add automatic update check to verify macOS is current

[davidwhittington]

Use softwareupdate --list to check for pending updates and report count + names in audit output. Flag as Medium finding if security updates are pending.