Safety checks for potentially destructive commands.
Returns a warning label when a command matches a known dangerous pattern. The caller decides whether to prompt for confirmation or proceed.
@spec check_command(String.t()) :: {:ok, String.t()} | :safe
@spec dangerous?(String.t()) :: boolean()