fix(token-guard): skip ALWAYS_DANGEROUS check when redaction is already present

Bugbot flagged: step 1 fired matchesAlwaysDangerous unconditionally,
blocking 'env | sed s/=.*/=<redacted>/' even though sed redaction is
the suggested fix. Steps 2 and 4 already gate on hasRedaction; step
1 now does too.

Author: jdalton

.claude/hooks/token-guard/index.mts

@@ -158,9 +158,11 @@ const check = (command: string): void => {
     }
   }
 
-  // 1. Always-dangerous patterns.
+  // 1. Always-dangerous patterns. Skip when the command already has a
+  // redaction pipeline — the suggested fix here is `env | sed ...`,
+  // which would itself match ALWAYS_DANGEROUS without this guard.
   const dangerous = matchesAlwaysDangerous(command)
-  if (dangerous) {
+  if (dangerous && !hasRedaction(command)) {
     throw new BlockError(
       `\`${dangerous.source}\` dumps env to stdout`,
       'Pipe through redaction, e.g. `env | sed "s/=.*/=<redacted>/"` or filter specific keys.',