feat(cli): add --ldd and --add-exec flags to auto-include binary and its libraries

This adds two optional flags to improve UX when sandboxing dynamically linked executables:

--add-exec: Automatically resolves and adds the target binary to --rox

--ldd: Runs ldd on the target binary and adds detected library paths to --rox

These help avoid common EACCES errors when users forget to include required .so files or the executable itself in --rox.

Also includes tests to validate both options in isolation and together.