Add the option to quietly update uninstalled modules to prevent them from becoming stale

Problem/Motivation

Modules that are not installed on a site are not checked for updates. This makes sense, but means that a site owner could enable a module that is outdated or insecure.

Steps to reproduce

1. Install Drupal CMS
2. Find a module that is not installed and use Composer to get an older version
3. See that it is not listed in updates

Proposed resolution

Add an opt-in (or opt-out?) for quietly updating uninstalled modules any time updates are run. This should be pretty risk-free considering that the module is not installed, but there may be some sites that would not want this behaviour.

Remaining tasks

User interface changes

API changes

Data model changes