feat: Add firewall rule enable/disable commands

[mgajda]

Implements upctl server firewall rule enable and upctl server firewall rule disable commands to modify existing firewall rules.

Features:

• Filter rules by position, comment, direction, protocol, dest-port, or src-address
• Multiple filters combine with AND logic
• Confirmation prompt when modifying multiple rules (configurable via --skip-confirmation)
• Shell completion for ports, IP addresses, and common values

Closes: #244

[mgajda]

Summary of changes:

  1. **Enhanced `delete` command**:
     - Now supports the same filters as enable/disable
     - Can delete multiple rules matching filters
     - Confirms before deleting multiple rules

  2. **Reimplemented `enable` command**:
     - Moves rules from AFTER catch-all to BEFORE catch-all
     - Only operates on "disabled" rules (those after catch-all)
     - Maintains rule content, just changes position

  3. **Reimplemented `disable` command**:
     - Moves rules from BEFORE catch-all to AFTER catch-all
     - Only operates on "enabled" rules (those before catch-all)
     - Maintains rule content, just changes position

All three work with filters:

1. --position (int)
   - Exact rule position (1-1000)
   - When specified, all other filters are ignored
   - Targets a single specific rule
2. --comment (string)
   - Partial match, case-insensitive
   - Searches within rule comments
   - Example: --comment "SSH" matches rules with "SSH server", "ssh access", etc.
3. --direction (string)
   - Values: in or out
   - Filters rules by traffic direction
4. --protocol (string)
   - Values: tcp, udp, or icmp
   - Filters rules by network protocol
5. --dest-port (string)
   - Matches destination port (either start or end of port range)
   - Example: --dest-port 80 matches rules affecting port 80
6. --src-address (string)
   - Partial match on source IP address
   - Searches in both start and end addresses of source ranges

Filter Behavior:

• Position filter: When --position is used, it takes precedence and all other filters are ignored (mutually exclusive)
• Multiple filters: When using comment/direction/protocol/dest-port/src-address, they work with AND logic (all specified filters must
  match)
• Batch operations: All three commands can operate on multiple rules when filters match more than one rule

Additional Options:

• --skip-confirmation (int, default: 1)
  • Maximum number of rules to modify without confirmation prompt
  • Set to 0 to always require confirmation
  • If more rules match than this value, user must confirm the operation

@kangasta Is it what you meant?