[codex] Fix ACL typing and MGM/QDB versions

[lobis]

Summary

• stop intercepting r while editing namespace attribute values
• keep recursive toggling on r in the attribute key-selection stage and clarify the input-stage hint
• show full MGM/QDB EOS build versions when available, using cheap RPM metadata first
• ignore SSH warning/banner noise while parsing RPM version output
• fall back to eos version, then eos --version, and keep raft-info as the QDB last resort
• size the MGM/QDB version column from content while keeping the table spread across wide terminals

Validation

• go test ./eos -run 'TestParseEOSServerPackageVersion|TestEOSVersionOnHostUsesPackageVersionFirst|TestQDBVersionOnHostUsesEOSBuildVersion'\n- go test ./eos -run 'Test(ParseEOSServerBuildVersionIncludesRelease|ParseEOSServerPackageVersionStripsRPMPlatformSuffix|EOSVersionOnHostUsesPackageVersionFirst|EOSVersionOnHostFallsBackToEOSVersion|EOSVersionOnHostFallsBackToDashVersion|QDBVersionOnHostUsesEOSBuildVersion)'\n- go test ./ui -run 'TestUnifiedMGMViewShowsFullBuildVersions|TestUnifiedMGMViewKeepsVersionColumnAtRightEdge|TestUnifiedMGMViewShowsQDBColumns'\n- go test ./...\n- go build ./...\n\n## Notes\n- Verified on eospilot that eos version works on the MGM leader but can fail on follower/non-master hosts, while RPM metadata still exposes the full build release.