Stricter permission checks for ssh, scp, rsync and sftp commands

Before running a shell command without asking you, Claude Code checks whether it is safe. Before, for ssh it checked only a few -o options: those setting the host name, the user, or a command to run. Now the checks go further:

• ssh: all -o option values and config keys are checked, and so is the host name.
• rsync, scp, rcp and sftp: the options -e, --rsh, -o, -S, -D, -F and -J are checked.

A command is refused if one of these options or host names looks suspicious.