v0.2.3

Expand bash_read classification to reduce false positives.

Commands like env, ps, df, whoami, wc, sort, uniq, cut, awk, sed, tr, xargs, tee, python -c, node -e are now correctly classified as read-only. Commands with > redirection are treated as bash_write:shell regardless of prefix.