core: enforce allowRemoteCommand on the host (#7370)

src/Simplex/Chat/Controller.hs

@@ -695,6 +695,11 @@ planResolveModeP =
     "never" -> pure PRMNever
     _ -> fail "bad PlanResolveMode"
 
+data CommandSource
+  = CSLocal -- entered on this device
+  | CSRemoteHost RemoteHostId -- forwarded to a paired remote host
+  | CSRemoteCtrl -- received from a paired remote controller
+
 allowRemoteCommand :: ChatCommand -> Bool -- XXX: consider using Relay/Block/ForceLocal
 allowRemoteCommand = \case
   StartChat {} -> False