Refuse to run omarchy-update as root

[AnPod]

Summary

Fixes omacom/omarchy#13329: sudo omarchy update made mise / user steps write root-owned state under ~.

Changes

• Exit early with a clear error when EUID == 0
• Guard runs before logging/lock so -y cannot skip it

Test plan

• ./test/shell.d/update-refuse-root-test.sh

[jandrusk]

Thanks for this. #11479 from @yashranaway fixes the same thing (it rejects root-run updates before any user state changes) and is a couple of weeks older. On 2026-10-03 the maintainers closed #13377, an equivalent fix, in favor of #11479 so the credit stays with the first fix. This one will probably go the same way. If #11479 misses a case you've hit, adding it there would be the best route.

(Small note if it does continue: the test only greps the source for EUID == 0. It never actually runs the script as root, so it would still pass if the guard ended up somewhere unreachable.)