Enhanced Heredoc Security Validation

What changed: More robust validation for heredoc patterns in bash command substitutions Previous behavior: Simple pattern matching could miss complex quoting scenarios New behavior: Multi-step validation ensures each heredoc is properly paired and safe Impact: Fewer false positives when using valid heredoc constructs with complex quoting patterns like cat <<'EOF' or cat <<\EOF