Update macadmins/osquery-extension to v1.5.1

## Goal | User story | |:---------------------------------------------------------------------------| | As a Fleet admin, | I want fleetd to ship the latest `macadmins/osquery-extension` (v1.5.1), | so that the `munki_info` table no longer errors on some ManagedInstallReport plists, `macadmins_unified_log` uses less memory on large log reads, and I can query the new Touch ID configuration tables. ## Context Fleetd currently bundles `github.com/macadmins/osquery-extension v1.4.1` (see `go.mod`). Upstream released v1.5.1 on 2026-08-18 (there was no v1.5.0, so this is the full delta from v1.4.1): https://github.com/macadmins/osquery-extension/releases/tag/v1.5.1 Notable changes in v1.5.1: - New `touchid_system_config` and `touchid_user_config` tables, with per-user flag support. - `unified_log` now streams log output as NDJSON instead of buffering a JSON array (macadmins/osquery-extension#119). Fleetd exposes this table as `macadmins_unified_log`. - Fixed `munki_info` unmarshalling error (macadmins/osquery-extension#118). This should resolve #48045. - Apache Thrift bumped 0.22.0 → 0.23.0 (Fleet already pins `github.com/apache/thrift v0.23.0`, so no conflict) and Go toolchain update. The extension is imported in: - `orbit/pkg/table/extension.go` (cross-platform tables) - `orbit/pkg/table/extension_darwin.go` (macOS tables) - `orbit/pkg/table/extension_linux.go` ## Changes ### Product - [ ] UI changes: No changes - [ ] CLI (fleetctl) usage changes: No changes - [ ] YAML changes: No changes - [ ] REST API changes: No changes - [ ] Fleet's agent (fleetd) changes: Bump `github.com/macadmins/osquery-extension` from v1.4.1 to v1.5.1 in `go.mod`. Register the new `touchid_system_config` and `touchid_user_config` tables in `orbit/pkg/table/extension_darwin.go`. - [ ] Fleet server configuration changes: No changes - [ ] Exposed, public API endpoint changes: No changes - [ ] fleetdm.com changes: No changes - [ ] GitOps mode UI changes: No changes - [ ] GitOps generation changes: No changes - [ ] Activity changes: No changes - [ ] Permissions changes: No changes - [ ] Changes to paid features or tiers: Fleet Free and Fleet Premium (no tier changes) - [ ] My device and fleetdm.com/better changes: No changes - [ ] Usage statistics: No changes - [ ] Other reference documentation changes: Add schema docs for the new `touchid_system_config` and `touchid_user_config` tables in `schema/tables/`. ### Engineering - [ ] Test plan is finalized - [ ] Database schema migrations: No changes - [ ] This is a premium only feature: No ### Risk assessment - Risk level: Low - Risk description: Minor upstream release. The `macadmins_unified_log` table now streams NDJSON internally; output rows should be unchanged, but this is the main behavioral change to verify. Thrift 0.23.0 matches the version Fleet already pins. ### Test plan #### Core flow - [ ] Build fleetd from this branch and install on a macOS host. - [ ] Run queries against `munki_info` on a host with a ManagedInstallReport that previously failed to unmarshal (see #48045). - [ ] Run queries against `macadmins_unified_log` and confirm rows are returned correctly. - [ ] Run queries against the new `touchid_system_config` and `touchid_user_config` tables. - [ ] Spot-check other tables backed by the extension (e.g., `macos_profiles`, `filevault_users`, `network_quality`, `wifi_network`). - [ ] Linux/Windows fleetd builds compile and run (the bump must not break non-Darwin builds). ### Confirmation 1. [ ] Engineer: Added comment confirming successful completion of test plan. 2. [ ] QA: Added comment confirming successful completion of test plan.