pub fn detect_injection(content: &str) -> Option<&'static str>
Detect prompt injection patterns in content.
Returns the first matched pattern if found.