696f272b88
- Add 26 tests covering _resolve_path, _ensure_shell_allowed, and _is_sensitive_env_var across path traversal, destructive command blocking, and secret-name detection. - Fix bug in _ensure_shell_allowed: regex patterns for chmod -R and chown -R used uppercase -R but the command is lowered before matching, so these patterns never matched. Changed to lowercase -r. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>