Function is_safe_cli_command 

fn is_safe_cli_command(s: &str) -> bool

CLI command names are joined into the bin-resolution path; same allowlist as provider ids, plus . (some real CLIs include dots, e.g. eslint.cmd).