add command line parser
add ProcCmdline to Snapshot, dry up scanning proc dirs
also use start time in ProcStat
also track started_at for ProcCmdline