Expand unsafe paste detection to cover more common cases

[teamcons]

Problem

Unsafe paste concerns at the time sudo, and its more modern variant doas
However it does not cover run0, the systemD variant

It also misses common unsafe paste

Proposal

Future-proof the feature :
Include more than doas and sudo :
-"run0"
-"su"
-"pkexec"

(Do we want this ?) Include "download and run script" commands :
-Include "wget -[\S]O.* |" (anything wget -O piped to something)
-Include "curl .* |" (Anything curl piped to something)
-Rm ?
After the pipe could be matching common interpreters (sh|bash|python|fish|zsh|dash). But theres a LOT of those...
(Im not sure of my regex fu...)

Prior Art (Optional)

No response