Security commander says most civilians who were at hotel when jihadist group al-Shabaab launched assault have been rescued