sg: introduce a -add-to-macos-firewall flag for start/run

Created by: jhchabran

This flag manually stops the firewall, adds the needed exceptions based on the command being run, and restores it.

As a result, the user is not greeted anymore by dozen popups to add exceptions.