- Add 26 tests covering _resolve_path, _ensure_shell_allowed, and
_is_sensitive_env_var across path traversal, destructive command
blocking, and secret-name detection.
- Fix bug in _ensure_shell_allowed: regex patterns for chmod -R and
chown -R used uppercase -R but the command is lowered before matching,
so these patterns never matched. Changed to lowercase -r.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>