feat: add command confirmation governance finding

[CoderDeltaLAN]

Adds AIRK-GOV004 for supported instruction files that encourage unsafe command execution without an explicit confirmation boundary.

Summary:

• adds conservative unsafe command execution guidance detection
• reports path and line for risky command guidance
• ignores negative guidance and explicit human-confirmation boundaries
• keeps normal local verification commands unflagged
• updates stable governance rule order

Boundary:

• does not execute commands
• does not perform full shell safety analysis
• does not block all command guidance
• does not touch README, release, tag, CI, dependencies, or docs

Verification:

• ./scripts/check.sh
• targeted AIRK-GOV004 unit tests
• isolated build and wheel install smoke