pi-guardrails: v0.18.1

Patch Changes

• c6a7be7: Treat >& file as a file redirect instead of file-descriptor duplication.
• 101d143: Match session command grants against the exact command that was approved.