[build] Bump shellcheck and ruff, fix multitool update script (#17029)

NOKEYCHECK=True
GitOrigin-RevId: f3193141c68d8b3851a1ba344fb1d04ef0ac9673
1 file changed