34067a7b6d
Review finding (agent/redact.py::_PATH_OR_VAR_VALUE_RE): anchoring the path/var exemption regressed `export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)` vs main — the `$(gpgconf` token no longer parsed as a reference and was masked. Accept a leading `$(` as a reference atom in the grammar and pin the gpg-agent line in test_real_path_and_var_references_stay_readable.