Fix 11 bugs found in full codebase review

- deploy_phishing.py: undefined extra_vars on orchestration playbook
- freebird/main_menu.py: set_variable() called as function, is a method; fix to config.prompt_set_variable()
- freebird/tool_manager.py: shell=True with f-string paths; replace with direct pip binary call
- certipy-enum.py: password exposed in process list and logs; pass via env var
- cleanup_engine.py: load_vars_file() called with path string, expects provider name
- ioc-u.py: scapy import not guarded; tool crashed if scapy missing
- um_ops.py + um-vault.py: SQL table names f-stringed directly; quote identifiers
- ops-logger.sh: 63-line duplicate function block; removed second copy; quote config_script var
- recon_tools.py: ir-sandbox + link-sandbox not in TOOLS dict; forensics menu option 5 hidden from user
- um-crack.py: missing --scope flag inconsistent with all other Umbra tools
- heartbeat_ingest.py: openssl subprocess not catching FileNotFoundError; wrap with clear error

utils/cleanup_engine.py

@@ -170,9 +170,7 @@ def set_provider_environment_for_teardown(config):
             # Load token from provider vars file
             try:
                 from utils.common import load_vars_file, PROVIDER_DIRS
-                provider_dir = PROVIDER_DIRS.get(provider, provider.capitalize())
-                vars_file = f"providers/{provider_dir}/vars.yaml"
-                vars_data = load_vars_file(vars_file)
+                vars_data = load_vars_file(provider)
                 if vars_data and vars_data.get('linode_token'):
                     os.environ['LINODE_TOKEN'] = vars_data['linode_token']
                     config['linode_token'] = vars_data['linode_token']  # Add to config for later use