Fixes a false positive where the word clean inside a quoted commit message could be mistaken for the destructive Git subcommand. The guard now tokenizes shell commands and identifies the actual Git subcommand while retaining protection across global options, environment assignments, command chains, subshells, wrappers, nested shells, and command substitutions. Includes the exact reported regression test and a safe commit check in a disposable repository.