Expand live shell approval regression corpus

[Aaronontheweb]

Summary

• classify the second post-swap window: 140 shell calls and 42 approval prompts
• link 11 executable live regressions to sanitized source evidence
• pin four intended automatic allows and seven intended prompts
• retain the existing adversarial and exact policy fixtures

Validation

• dotnet build Netclaw.slnx -c Release --no-restore
• dotnet test Netclaw.slnx -c Release --no-build --no-restore (7,296 passed; 15 expected skips)
• openspec validate structure-shell-approval-policy --strict
• pwsh ./scripts/Add-FileHeaders.ps1 -Verify
• changed-file dotnet format --verify-no-changes
• changed-file Slopwatch: 0 findings
• evidence PII contract tests
• git diff --check

No production behavior changes. Model evals are not applicable to this evidence-and-test-only slice.