[codex] Improve sofa table tests

[grahamgilbert]

Summary

• add SOFA security release and unpatched CVE column coverage
• cover constraint defaults and ignored non-equality constraints
• add invalid version and osquery error-path tests
• cover cross-major CVE filtering behavior

Validation

• GOCACHE=/tmp/osquery-extension-go-cache go test ./tables/sofa
• GOCACHE=/tmp/osquery-extension-go-cache go test ./...