Fix quoted DLL paths in review command prompts

[Widthdom]

Summary

The command guard rejected required Codex reviews when their quoted prompt mentioned the repository-built DLL. Recognize supported prompt/document/display arguments as data while preserving conservative rejection of unknown command forms, actual unsupported DLL execution and active shell syntax.

Extend the existing shared contract matrix across the core, Codex PreToolUse/PermissionRequest and Claude PreToolUse. Regression cases cover quoted and multiline prompts, literal separators, substitutions, comments, redirections, negation, compound commands, execution wrappers, indirect hosts and line continuations.

Fixes #5417

Validation

• PYTHONDONTWRITEBYTECODE=1 python3 -B -m unittest discover -s .agent_harness/tests — 49 tests passed, including the expanded shared adapter matrix.
• dotnet build — passed with no warnings or errors.
• dotnet run --project tools/CodeIndex.Changelog -- check — passed.
• git diff --check — passed.
• Root index and workspace manifest freshness checks passed after refresh.
• Required Codex adversarial review: two rounds completed. All eight findings were addressed with adapter regression cases. The final follow-up passed the full Python suite; no third independent review was run, following the workflow's two-round limit.

The implementation changes Python guard behavior only; no .NET runtime behavior or dependency changes are included.

Documentation and changelog

• Updated AGENT_GUIDE.md to document the supported data arguments and conservative fallback.
• Updated the English and Japanese sections of TESTING_GUIDE.md.
• Added bilingual fragment changelog.d/unreleased/5417.fixed.md; CHANGELOG.md is unchanged.
• AGENTS.md and CLAUDE.md are unchanged.

Unknown DLL-bearing command forms and wrappers remain blocked. Use a direct supported review command, or a body file for complex document content.

Follow-up candidates

None.