feat(cli): add --ldd and --add-exec flags to auto-include binary and its libraries
This adds two optional flags to improve UX when sandboxing dynamically linked executables:
--add-exec: Automatically resolves and adds the target binary to --rox
--ldd: Runs ldd on the target binary and adds detected library paths to --rox
These help avoid common EACCES errors when users forget to include required .so files or the executable itself in --rox.
Also includes tests to validate both options in isolation and together.