support e.sc_is_enter

This is just for syscall tracing events
update scripts/syscalls_histogram.kp to use e.sc_is_enter
update README.md