feat: omit SSH listeners and enrich Docker published ports

[wangnan0916]

Summary

• Skip Development Host loopback listeners that speak SSH (process sshd or SSH identification banner) so the remote SSH daemon is not offered for import.
• When listener metadata is otherwise empty and the scanning user can reach the Docker API, label published container ports with the Compose service name and project working directory so existing working-directory rules can select them.

Test plan

• Build local CLI and run status against a Linux host with a loopback sshd listener; confirm that port is absent from AVAILABLE/FORWARDS
• On a host with Compose services published to 127.0.0.1, confirm APP/WORKING DIRECTORY show service name and com.docker.compose.project.working_dir
• With a matching add --pwd / global working-directory rule, confirm those Docker ports become automatic forwards
• Confirm ordinary same-user app listeners (node, etc.) still show process metadata and forward as before
• go test ./internal/openssh/

Made with Cursor