Suggest a guard for flagged rm commands

CHANGELOG · original

Improved the dangerous-rm permission prompt to name the flagged rm command and suggest a ${VAR:?} guard, so headless runs can recover