test(claudecode): catch indirect claude launch sites in the launch guard

The guard only matched "claude" as a direct call argument, so GenerateText's claudePath := "claude" indirection was invisible to it. Match any "claude" literal inside a function, reject package-level ones (unattributable), and record GenerateText's isolation policy.