Hydra and http improvements

[beyefendi]

Summary

• Add explicit path and port parameters to the Hydra HTTP form endpoint and MCP client tool, avoiding fragile additional_args usage.
• Improve input validation and shell quoting for Hydra to make form-based attacks (e.g. http-post-form) safer and easier to use.
• Tweak default Nmap scan type and small quality-of-life fixes (e.g. .gitignore and command string cleanups).

Details

• Server: hydra endpoint now accepts path and port, validates path for form-based services, and uses shlex.quote for user-provided values.
• Client: hydra_attack MCP tool exposes path and port in the function signature and forwards them to the server.
• Nmap: default scan type updated from -sV to -sS in the MCP client.

Test plan

• Run Hydra HTTP form attack via MCP using path and port arguments (no manual quoting in additional_args).
• Confirm error response when path is omitted for http-post-form / http-get-form style services.
• Run Nmap scan via MCP and verify the default scan flags in the executed command.

[beyefendi]

@Wh0am123 latest commits are breaking this PR. I resolved conflicts this time.