fix: reject unknown flags after --update

--update ignored everything after the flag and ran the updater anyway,
unlike doctor, skill, and recordings which print usage and exit 2 on
unexpected arguments. Validate that trailing args are only -y/--yes.