destructive-ops-blocker-false-positive-on-backup-suffixes

Regex pattern \b(rm|mv)\s+.*MEMORY\.md\b incorrectly blocks rm MEMORY.md.bak.123 because . is a non-word character and the word boundary matches mid-filename. It also matches rm inside quoted strings like echo "rm MEMORY.md". Fix: use CMD_START anchor (?:^|[;&|\(]\s*)to require command position, and NOT_BACKUP anchor(?![.\w])` to prevent matching filename prefixes.