[build] Bump shellcheck and ruff, fix multitool update script (#17029) NOKEYCHECK=True GitOrigin-RevId: f3193141c68d8b3851a1ba344fb1d04ef0ac9673