Dicklesworthstone destructive_command_guard

• CVE-2026-77474 High 7.1 dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open 0.1%