fix: expand destructive-command blocklist to prevent security bypasses

[bunnysayzz]

Description

Fixes #13001 - the isCriticalCommand blocklist is incomplete, allowing dangerous commands to auto-execute in headless/auto mode.

Vulnerabilities Fixed

1. Missing critical paths: /home, /root, and $HOME were not in the dangerous path list, allowing rm -rf /home or rm -rf $HOME to bypass the blocklist
2. Shell expansion bypass: $HOME and ${HOME} variable expansion patterns were not detected, allowing bypass via rm -rf $HOME
3. Missing destructive commands: find -delete, shred, wipefs were not blocked despite being equally destructive as rm -rf
4. Missing privilege escalation: pkexec (PolicyKit execution) was not in the privilege escalation list

Changes

• Added /home, /root, /home/*, /root/*, $HOME, ${HOME} to hasDangerousPath
• Added /home/, /root/, $HOME, ${HOME} to rm critical paths list
• Added find -delete detection (destructive file deletion via find)
• Added shred and wipefs as critical destructive commands
• Added pkexec as a privilege escalation command

Closes #13001

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}