Add NSF support for pam rotation script list/add/edit/delete

[mtyagi-ks]

Summary

• Enable pam rotation script (list/add/edit/delete) for pamUser/pamDirectory records in Nested Shared Folders.
• Add update_nsf_typed_record so NSF updates can add/remove record links for script file attachments.
• Include script.fileRef in typed-record ref extraction so classic and NSF script updates keep file links in sync.

Test plan

• pam rotation script add --script <file> <nsf-pamUser-uid> uploads and attaches the script
• pam rotation script list <nsf-pamUser-uid> shows script UID/name/command
• pam rotation script edit --script <uid|name> --script-command "..." <nsf-pamUser-uid> persists command
• pam rotation script delete --script <uid|name> <nsf-pamUser-uid> removes the script
• Classic (non-NSF) script commands still work
• Depends on / stacks on pam-nsf-support-int