More commands in the console with a new help

[javuto]

Summary

Adds a larger set of read-only console shortcuts backed by osquery tables, including file hashing/type checks, HTTP checks, process/network inspection, host inventory, persistence, package, browser extension, and firewall views.

Also replaces the one-line help output with a grouped multi-line cheat sheet so operators can discover the new commands directly from the console.

Changes

• Added console aliases such as hash, mime, curl, ports, sockets, lsof, env, routes, dns, autoruns, packages, firewall, os, sysinfo, and uptime.
• Kept command execution read-only by translating aliases to osquery SELECT statements.
• Added validation for path, URL, PID, and no-argument commands.
• Added platform-aware queries for packages and firewall.
• Expanded parser tests for alias SQL generation, argument validation, and formatted help output.

Validation

• GOCACHE=/tmp/osctrl-gocache go test ./pkg/console ./cmd/api/handlers
• git diff --check

Security Notes

• User-controlled path and URL values are SQL-quoted.
• PID arguments are parsed as integers.
• curl is limited to http and https URLs.
• Shell-style syntax remains rejected for path commands.