Local port forwarding

[0x2b3bfa0]

It would be nice to have a command for local port forwarding, so users can securely access services running on the task from their local machines.

• aws, az & gcp — either user–mode WireGuard or SSH tunneling
• k8s — see portforward.go

Related to #291; same priority, lower than p2 for now.