cli: be more robust at finding hledger-* add-ons

Previously executables with eg digits in their name were ignored.
It now finds all files beginning with hledger-, optionally ending with
.hs or .lhs, and with no other dots in the name.
As before, we don't check for executable permission (performance ?).
parsing: comments can also start with # in col 0