Function effective_shell_command 

pub fn effective_shell_command<'a>(
    binary: &str,
    args: &'a [String],
) -> Option<&'a str>

Build the effective command string for blocklist evaluation when the binary is a shell interpreter (bash, sh, zsh, etc.) and args contains a -c script.

Returns None if the args do not follow the -c <script> pattern.