feat(panos): add LLDP port discovery to PAN-OS inspect interface - #2564

- Remove virtual-wire config from each interface before configuring as layer3
- Only commit factory cleanup if we actually deleted something
- Check commit return values and fail loudly with proper errors
- Include job details in commit failure error messages

This fixes inspection failures on devices with virtual-wire interfaces
configured, where commits were silently failing and code continued anyway.

Security rules reference zones, so they must be deleted first to avoid
validation errors when cleaning up factory/staging config for LLDP discovery.

This allows inspect to work on devices that have been through a staging
station that adds generic security rules.

Simplified LLDP discovery to configure all interfaces instead of trying
to detect which ones are already configured. Since the device must be in
manageable (not production) state, we can be destructive and just blast
through all interfaces.

This fixes the issue where ethernet1/1 and ethernet1/2 had virtual-wire
config that was detected as 'configured', causing them to be skipped,
which meant they never got LLDP enabled.

- Remove verbose DEBUG logs showing full XML responses and config operations from panos_api.py
- Remove per-interface deletion logs (22 lines per run)
- Add single summary log showing which factory configs were deleted
- Use contextlib.suppress for cleaner exception handling
- Keep essential INFO logs for key events (neighbor discovery, port creation)

Ruff S110 requires specific exception types instead of bare except Exception.
This also improves error handling by only catching the expected exception type.

…ries are assigned"

This reverts commit 5adf811.

Changes interface sorting to match Nidhi's reconciler implementation:
- Uses re.split(r'(\d+)', name) to split on ALL digits, not just the last one
- Creates tuples for natural sorting (0, digit) or (1, string)
- Correctly sorts ethernet1/20 before ethernet2/19 (slot takes precedence)
- Previously only looked at port number, incorrectly sorting ethernet2/19 first

This ensures port category assignment in inspect matches enroll-fw exactly.

Validates minimum requirements before marking firewall as manageable:
- Requires at least 2 ports (outside/inside) - no 1-armed firewalls
- Warns if PA-1410 uses slow 1G ports (eth1/1-18) instead of 10G (eth1/19-22)
- Validates port categories were assigned correctly

The < 2 ports check fails fast before port creation and is outside the
exception handler so it properly raises HardwareInspectionFailure.

Validation only runs if port discovery succeeded - if LLDP fails, we
still return manageable with a warning (existing behavior preserved).