fix(cli): validate firewall adapter IP inputs

[rissrice2105-agent]

Summary

• validate firewall adapter inputs as IPv4 addresses before shelling out to nft or iptables
• reject malformed detection source IP values before they reach command construction
• apply the same validation to the dry-run adapter for consistent behavior

Tests

• corepack pnpm --filter @profullstack/threatcrush build