aws-ssm-pf — forward a port to any SSM instance without touching the console

Forward a local port to an SSM-managed instance with a fuzzy picker, remembered targets, and automatic local-port fallback.