Select default command-safety rules from the live session shell so legal PowerShell subexpressions are allowed and PowerShell-native dangerous commands are blocked. Untouched pre-shell-aware lists gain the new defaults on read. Closes #3256