pub fn resolve_shell_engine(
cli: Option<ShellEngine>,
configured: Option<ShellEngine>,
full_access: bool,
) -> ShellEngineExpand description
Resolve the effective shell engine in precedence order: an explicit CLI
--shell-engine wins, then the [shell] engine config key, then — only when
neither was set — --full-access auto-upgrades (to host on unix, brush
on Windows), otherwise the safe-subset default. Keeping the auto-upgrade
last means an explicit choice is never silently overridden.