add Java JDK/JRE selection and patches

- Created dedicated `extras/java.sh` module for modular Temurin/Adoptium repository handling and isolated GPG key management.
- Implemented selective JRE/JDK installation paths: Gaming (Minecraft) vs Development environments with version control selectors.
- Enhanced user group membership logic (`_ensure_sudo_group`) to auto-configure administrative privileges on fresh installs.
- Introduced maintenance-friendly passwordless sudo for `apt`, `systemctl`, and shutdown commands via `/etc/sudoers.d/`.
- Added home directory ownership repair utility to fix root-owned files in user directories after improper `sudo` usage.
- Enabled visual password feedback (`pwfeedback`) toggle for enhanced terminal usability during authentication prompts.
- Refactored Debian 13/Trixie repository sourcing logic to ensure idempotency and prevent backports/duplicate sources conflicts.
- Updated Bullseye legacy modules (extras.sh, repos.sh) to exclude deprecated packages (`hx`, `vscodium`) and enforce Firefox ESR defaults.
- Cleaned repository configurations by removing obsolete `bullseye-updates` source entries to prevent dependency conflicts.
- Implemented NVTOP conditional detection logic ensuring display only on active Nvidia drivers or supported architectures (Trixie/Bookworm).
- Corrected `/modules/bullseye/extras.sh` menu mappings (Programming, Dev Tools) and verified package lists excluding incompatible tools (`hx`, `vscodium`).
- Integrated ClamAV security module with daemon state management and background scan execution flows in all Security menus.
- update README.md

modules/extras/_helpers.sh

@@ -8,3 +8,24 @@ _inst() {
 _state() {
     is_installed "$1" && echo "ON" || echo "OFF"
 }
+
+_install_clamav() {
+    if is_installed "clamav"; then
+        echo "ClamAV already installed."
+        return
+    fi
+    _run_install "clamav"
+    echo -e "${GREEN}ClamAV installed.${NC}"
+
+    if _confirm "ClamAV" "Update virus signatures now (freshclam)?"; then
+        sudo systemctl stop clamav-freshclam 2>/dev/null || true
+        sudo freshclam || true
+        sudo systemctl start clamav-freshclam 2>/dev/null || true
+    fi
+
+    if _confirm "ClamAV" "Run quick scan on /bin to verify engine works?"; then
+        echo "Running background scan on /bin..."
+        sudo clamscan --recursive --infected /bin &
+        echo "Scan running in background (PID $!). Check results later."
+    fi
+}