feat: 新增 file/svc/archive/sys/log/fw 分组并扩充 net、proc

- file：findbig 按大小、findrecent 按修改时间、findname 按名称查找文件
- svc：systemctl / launchctl / sc 统一接口，status、enable、disable、logs
- archive：按扩展名自动识别格式并解压，支持 tar.gz/tgz/tar.bz2/tar.xz/tar/zip/gz
- sysinfo：OS、CPU、内存、磁盘一览
- log：journalctl / log show / wevtutil 搜索关键字与查看最近日志
- fw：ufw / firewalld / iptables / ALF / netsh 统一接口，status、allow、deny
- net 新增 ping、trace（mtr 优先）、dns（dig 优先）、curl HTTP 诊断
- proc 新增 topmem、topcpu、killname
- 危险操作（svc enable/disable、proc killname、fw allow/deny）需 --yes 确认
- 注册表、executor 派发表、cli 分组说明与 README 同步更新

internal/executor/builtin.go

@@ -32,6 +32,7 @@ type BuiltinRequest struct {
 type Builtin func(ctx context.Context, req BuiltinRequest) error
 
 var builtins = map[string]Builtin{
+	"archive.extract":    runArchiveExtract,
 	"disk.usage":         runDiskUsage,
 	"diagnose":           runDiagnose,
 	"docker.df":          runDockerDF,
@@ -46,14 +47,34 @@ var builtins = map[string]Builtin{
 	"docker.save":        runDockerSave,
 	"docker.stats":       runDockerStats,
 	"docker.stop":        runDockerStop,
+	"file.findbig":       runFileFindBig,
+	"file.findname":      runFileFindName,
+	"file.findrecent":    runFileFindRecent,
+	"fw.allow":           runFwAllow,
+	"fw.deny":            runFwDeny,
+	"fw.status":          runFwStatus,
 	"git.retime":         runGitRetime,
 	"git.retime.preview": runGitRetimePreview,
 	"java.run":           runJavaRun,
 	"java.run.preview":   runJavaPreview,
+	"log.last":           runLogLast,
+	"log.search":         runLogSearch,
+	"net.curl":           runNetCurl,
+	"net.dns":            runNetDNS,
+	"net.ping":           runNetPing,
 	"net.pids":           runNetPIDs,
 	"net.ports":          runNetPorts,
+	"net.trace":          runNetTrace,
+	"proc.killname":      runProcKillName,
 	"proc.nohup":         runNohup,
+	"proc.topcpu":        runProcTopCPU,
+	"proc.topmem":        runProcTopMem,
 	"proc.wait":          runProcWait,
+	"svc.disable":        runSvcDisable,
+	"svc.enable":         runSvcEnable,
+	"svc.logs":           runSvcLogs,
+	"svc.status":         runSvcStatus,
+	"sysinfo":            runSysInfo,
 	"user.grant":         runUserGrant,
 	"user.revoke":        runUserRevoke,
 }