fix: reorder & metacharacter check after multi-char operators

Move single-char `&` pattern right after `&&`, `||`, `|` so multi-char
operators are checked before their single-char prefixes, matching the
stated design principle in the comment.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: betegon

src/lib/init/local-ops.ts

@@ -52,6 +52,7 @@ const SHELL_METACHARACTER_PATTERNS: Array<{ pattern: string; label: string }> =
     { pattern: "&&", label: "command chaining (&&)" },
     { pattern: "||", label: "command chaining (||)" },
     { pattern: "|", label: "piping (|)" },
+    { pattern: "&", label: "background execution (&)" },
     { pattern: "`", label: "command substitution (`)" },
     { pattern: "$(", label: "command substitution ($()" },
     { pattern: "(", label: "subshell/grouping (()" },
@@ -64,7 +65,6 @@ const SHELL_METACHARACTER_PATTERNS: Array<{ pattern: string; label: string }> =
     { pattern: "\r", label: "carriage return" },
     { pattern: ">", label: "redirection (>)" },
     { pattern: "<", label: "redirection (<)" },
-    { pattern: "&", label: "background execution (&)" },
     // Glob and brace expansion — brace expansion is the real risk
     // (e.g. `npm install {evil,@sentry/node}`)
     { pattern: "{", label: "brace expansion ({)" },