v5: keep scan -h within the option budget

The staged-rollout and socket.yml flags pushed scan's short help past
nine options once #279 trimmed -h. --max-new-patches and
--no-socket-yml now show only in --help and parse as before.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: claude

crates/socket-patch-cli/src/lib.rs

@@ -177,6 +177,8 @@ fn short_help_hidden_own(sub: &str) -> &'static [&'static str] {
             "vex_no_verify",
             "vex_doc_id",
             "vex_compact",
+            "max_new_patches",
+            "no_socket_yml",
         ],
         "get" => &["id", "cve", "ghsa", "package", "save_only", "one_off", "all_releases"],
         "vex" => &["doc_id", "compact"],