[codex] Improve crowdstrike_falcon table tests

[grahamgilbert]

Summary

• add filesystem and osquery error coverage for Falcon table helpers
• expand Linux falconctl parser coverage for uppercase output and false RFM state
• avoid panics when falconctl output omits the version field

Validation

• GOCACHE=/tmp/osquery-extension-go-cache go test ./tables/crowdstrike_falcon
• GOCACHE=/tmp/osquery-extension-go-cache go test ./...