Enhanced Security: Path Resolution Bypass Protection

What: Three new security checks to prevent attacks using shell expansion and directory changes

Examples that now require approval:

echo "data" > /tmp/$VAR/file.txt        # Variable expansion in redirect
cd /tmp && rm -rf important/            # Directory change with write operation  
cat file > /etc/$(whoami)/config        # Command substitution in path

Details:

• Shell expansion detection: Regex /(?:>>?)\s\S\$/ catches variable expansion with redirections
• Dollar sign in paths: Any file path containing $ character requires approval
• CD with write operations: Compound commands using cd + write operations require approval
• All checks use "ask" behavior (require approval) rather than "deny"
• Evidence: tP1() at line 254131, TYQ() at line 253932, Fe8() at line 253997