hayabusa: Add version 4.0.0

[l46983284-cpu]

Add hayabusa 4.0.0, a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

• SHA256 hashes computed locally from fresh downloads of both the win-x64 and win-aarch64 release zips
• checkver tracks the GitHub repo; autoupdate follows the upstream hayabusa-$version-win-{x64,aarch64}.zip asset naming (stable across v3.8.1 → v4.0.0)
• Each zip ships a single versioned hayabusa-<ver>-win-<arch>.exe at the root next to config/ and rules/; pre_install renames it to hayabusa.exe (same pattern as cc-connect), so no extract_dir is needed
• License AGPL-3.0-only per upstream LICENSE.txt and README (plain AGPLv3, no "or later" statement)

Closes #7235

Test plan: hashes and zip layout verified by direct download on a Linux host; no Windows/Scoop environment at hand, relying on bucket CI for install validation.

• Use conventional PR title: <manifest-name[@version]|chore>: <general summary of the pull request>
• I have read the Contributing Guide

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: d3d1a3d5-fbf6-4989-9e57-b54b9ffd3238

📥 Commits

Reviewing files that changed from the base of the PR and between 5537d7f and b946fe8.

📒 Files selected for processing (1)

• bucket/hayabusa.json

🚧 Files skipped from review as they are similar to previous changes (1)

• bucket/hayabusa.json

---

Summary by CodeRabbit

• New Features
  • Added Hayabusa 4.0.0 to the available software catalog.
  • Added support for Windows x64 and ARM64 installations.
  • Enabled version checking and automatic updates.

Walkthrough

Changes

Hayabusa package

Layer / File(s)	Summary
Hayabusa manifest setup bucket/hayabusa.json	Adds the Hayabusa 4.0.0 manifest with 32-bit, 64-bit, and ARM64 downloads, checksums, executable installation and exposure, GitHub version checking, and architecture-specific autoupdate URLs.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely identifies the Hayabusa manifest addition and target version.
Description check	✅ Passed	The description includes the change summary, issue link, implementation details, test plan, and required checked confirmations.
Linked Issues check	✅ Passed	The manifest adds Hayabusa 4.0.0 with standard downloads, architecture support, metadata, and installation behavior matching issue #7235.
Out of Scope Changes check	✅ Passed	The pull request changes only the Hayabusa manifest and contains no unrelated modifications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[z-Fng]

/verify

[github-actions]

All changes look good.

Wait for review from human collaborators.

hayabusa

• Lint
• Description
• License
• Hashes
• Checkver
• Autoupdate

Check the full log for details.

[z-Fng]

Test plan: hashes and zip layout verified by direct download on a Linux host; no Windows/Scoop environment at hand, relying on bucket CI for install validation.

Scoop doesn't have an install validation CI right now, so please make sure to test it locally before submitting the PR. I don't have a Windows machine on hand to test it myself. Code-wise, LGTM!