[OpenShell OCSF] Process records do not include command arguments (cmd_line) #13175

Description

OCSF process records only have the program name and pid. Network records fill cmd_line with absolute paths found in argv along the process chain, not the real arguments. Auditors cannot see what command was run.

Reported by an enterprise customer evaluating OpenShell through NemoClaw on NVIDIA LaunchPad. Reproduced internally.

Environment

Customer:   NemoClaw v0.0.124 (OpenShell 0.0.116, OpenClaw 2026.7.1) on NVIDIA LaunchPad (Ubuntu 24.04)
Reproduced: NemoClaw v0.0.127 and v0.0.131 (OpenShell 0.0.116), Ubuntu 24.04, Docker, 1x L4
Still present in OpenShell v0.1.3 and main (v0.1.4-pre.4), checked in code

Root cause

• Process launch event: OcsfProcess::new(program, pid) with no cmd_line (run.rs in 0.0.116, crates/openshell-sandbox/src/delegated.rs on v0.1.3 and main).
• Network events: cmd_line comes from cmdline_paths (procfs.rs), which joins only absolute paths.

Expected Result

cmd_line carries the real argv, optionally with secret redaction and a length cap.

Suggested fix

Read /proc/<pid>/cmdline, redact known secret patterns, cap length, and set cmd_line on process and network records.