fix(ja4t): align Rust JA4T output with Wireshark/Zeek

[elpy1]

This PR aligns Rust with Wireshark/Zeek on:

• Empty TCP options: emit "00" placeholder instead of an empty field
• Absent MSS / window scale: zero-pad defaults to "00" instead of "0"
  (window scale stays unpadded when nonzero, matching Wireshark)
• Duplicated MSS / window-scale options: last occurrence wins
  instead of first

Still unresolved:

• ECN-flagged SYN behavior (accepted by the Rust implementation
  but ignored by Wireshark/Zeek).

Partially addresses #304

[vlvkobal]

JA4T numeric fields are formatted as decimal values, while 00 is reserved for fields that are absent. The current implementation conflates a missing value with a present value of zero. Could you update the formatting logic and tests to preserve this distinction?

@john-althouse, since this behavior is not currently documented publicly, should we add it somewhere?

[vlvkobal]

I rechecked this against the Wireshark and Zeek implementations. Both treat a missing value and an actual zero the same here, so your current implementation is consistent with them. Please ignore my previous comment.

@john-althouse, it might be worth clarifying this in the spec.

[vlvkobal]

Thanks for the PR, and sorry for the confusion around the 00 behavior.

I rebased the branch and added a small test for it. Everything looks good now - I’m going to merge this.