v0.5.12

Claude Code guard. The hook that refuses commands printing secrets wholesale now reads a command the way the shell does: only the command word and its arguments count, so the same words inside a quoted string (a commit message, an echo) no longer get a command refused. Commands inside $(…) and backquotes are still checked, and sudo, exec, time and nohup in front of one are looked past. Found because v0.5.11's hook refused a commit whose message mentioned touchenv get.