feat(security): implement valid VirusTotal lookup

[betterclever]

Summary

Implemented the VirusTotal Lookup component (`security.virustotal.lookup`) as part of the '25 Features' roadmap.
This component allows workflows to query the VT v3 API for basic threat intelligence on IPs, file hashes, domains, and URLs.

Closes #20 (VirusTotal Integration)

Key Features

• Supported Types: Checks IPs, Domains, File Hashes, and URLs.
• Secrets Integration: The apiKey is securely passed via a dedicated input port (`apiKey`), allowing integration with secret loaders.
• Robustness: Handles 404s gracefully (returning clean/empty stats) and logs full execution details.

Validation

• Successfully tested end-to-end using `.playground/test-virustotal-e2e.ts`.
• Verified real API calls to VirusTotal using a test key, returning accurate malicious/harmless counts.
• Ensured integration with the secret manager service.