Function tokenize 

pub fn tokenize(raw: &str) -> Result<Vec<String>, Rejection>

Tokenize the command using POSIX shell quoting rules so that quoted arguments survive (git commit -m "fix: thing" becomes four tokens).

Metacharacter rejection runs first, so any pipeline syntax never reaches this function in normal operation.