Use focused npm advisories and nudge only for ready upgrades (#99222)
Stacked on #99230.
### Why?
Simplify the advisory check by querying only the versions we need
instead of sending a bulk audit request.
### How?
Query npm advisories for the installed version and relevant upgrade
candidates. Remove the GHSA lookup and fallback. Only show a nudge when
the assessment finds a ready target; otherwise, skip it.
<!-- NEXT_JS_LLM -->
Closes NAR-948