Adds a new CLI subcommand to replace the entire ACL at runtime from a TOML input (either inline or from a file). The command is `easytier-cli acl set <TOML|@path>`. Co-authored-by: bright <nako_ruru@sina.com>