feat(dynamic): remap command injection sink cap to CODE_EXEC, update corpus markers to NYX_PWN_791_CMDI, and enhance spec derivation strategies for wider coverage and consistency

tests/dynamic_fixtures/class_method/go_recursive_deps/benign.go

@@ -6,7 +6,7 @@ import "strings"
 type ShellRunner struct{}
 
 func (ShellRunner) Run(command string) string {
-	return strings.ReplaceAll(command, "NYX_PWN_CMDI", "")
+	return strings.ReplaceAll(command, "NYX_PWN", "")
 }
 
 type UserRepository struct {

tests/dynamic_fixtures/class_method/java_recursive_deps/Benign.java

@@ -2,7 +2,7 @@
 public class Benign {
     public static class ShellRunner {
         public String run(String command) {
-            return command.replace("NYX_PWN_CMDI", "");
+            return command.replace("NYX_PWN", "");
         }
     }
 

tests/dynamic_fixtures/class_method/ruby_recursive_deps/benign.rb

@@ -1,7 +1,7 @@
 # Benign control for recursively constructed Ruby dependencies.
 class ShellRunner
   def run(command)
-    command.gsub('NYX_PWN_CMDI', '')
+    command.gsub('NYX_PWN', '')
   end
 end