[deckhouse-cli] Update the description of mirror pull flags

[VaLosev]

Currently, running the d8 mirror pull command with the --include-module flag may result in an error due to redirection with the ">" symbol.

d8 mirror pull --license='<LICENSE_KEY>' --source=registry.deckhouse.ru/deckhouse/ee  --no-platform  --no-installer -i console@>=1.43.2 ./console
Error executing command: pull failed: Prepare module filter: empty constraint

To avoid this issue, I've highlighted in the flag descriptions that the module version and its restrictions should be written in quotation marks.

d8 mirror pull \
--license='<LICENSE_KEY>' \
--no-platform --no-security-db \
--include-module console@">=1.43.2" \
./console

Added the DiagnoseConstraintParseError function to report an error when output is redirected instead of being passed to d8.
This function is triggered when both signals are present:

1. The error message contains an "empty constraint" (the exact text that modules.NewFilter / modules.ParseVersionConstraint produces when there is no constraint).
2. At least one raw flag value ends in @ after whitespace removal—a clear sign that the shell ate the >=… part as a redirection target.

d8 mirror pull --license='<LICENSE_KEY>' --source=registry.deckhouse.ru/deckhouse/ee  --no-platform  --no-installer -i console@>=1.43.2 ./console'

error: Invalid version constraint (possible shell redirection)
  ╰─▶ empty constraint

  * The shell interpreted '>' as output redirection instead of passing it to d8.
The constraint part after '@' was never received — perhaps you forgot to quote the flag value?
    -> Wrap the constraint in double quotes: --include-module "module-name@>=1.43.2"
    -> Example: d8 mirror pull --license='****' --include-module console@">=1.43.2" ./console

The parseAndValidateVersionFlags, createModuleFilter, and createPackageFilter functions have been updated to call this check, and tests have been added.