v0.7.10 — token-aware authority classifier hardening

Replaces the shell admin-classification regexes with shlex token-aware parsing
that inspects the actual parsed command and delete targets. Closes prior bypasses
and false positives: recursive-force deletes are detected across combined, split,
and GNU long options; targets are analyzed after quote removal so absolute, home,
variable, ./.., traversal-outside-workspace, and unprovable-wildcard deletes
are admin-only while workspace-relative cleanup (rm -rf build/./dist/cache) stays
at operator; remote installer pipes are matched structurally across segments;
wrappers and env assignments before a privileged command are handled; forced git
history includes --force-with-lease; secret stores match by path component with
.env.example/.sample/.template explicitly permitted. Invalid FORGE_AUTHORITY now
fails closed to observe, and malformed shell tokenization fails closed to admin.