Auto Review for shell commands with AST parsing and a subagent

AST parsing, capability extraction, and command matching for safe shell command execution in Bionic's Auto Review mode.