Add a shell approval workload corpus

[Aaronontheweb]

Summary

• Add 42 synthetic Bash workload cases based on sanitized aggregate approval patterns.
• Cover search, read, pipeline, redirect, and ordinary file-change commands.
• Prove prompt and stored-grant reuse for direct jq, tee, sed, cp, mv, touch, mkdir, rm, and redirected printf commands.
• Keep dynamic paths, loops, substitutions, and compound dynamic forms fail-closed.
• Update the human-reviewed approval matrix snapshot.

No raw command text, path, identifier, URL, or user content from the approval sample is present in this change.

Current gaps recorded by the corpus

• sed -n prompts although the Linux safe-verb list includes sed -n.
• Safe stages and stored grants do not compose in mixed pipelines such as cat with jq and grep with tee.
• Loops and substitutions remain complex under ShellSyntaxTree 0.2.

These rows describe current behavior. Follow-up changes will correct the first two gaps and then use ShellSyntaxTree 0.3 for bounded forms.

Validation

• dotnet build Netclaw.slnx -c Release --no-restore
• dotnet test Netclaw.Security.Tests: 685 passed
• dotnet test Netclaw.Actors.Tests: 2,906 passed
• shell approval matrix: 159 passed
• dotnet slopwatch analyze: 0 issues
• file header verification passed
• PII scan passed
• adversarial review passed