bash_guard blocks cat heredoc even for a new file - #46

VERDICT: accept

• Real friction: 23 reports in 17 tasks, and the retry cost is real. Allowing cat > file << for a path that doesn't exist is a small, well-scoped change. Overwriting or appending to an existing file is still blocked.
• Tested: test_cat_heredoc_blocks_existing_files_only covers both > and >> on an existing file, plus the new-file pass. The removed cat > src/x.ts case from the old block list is covered there. I did not run the suite myself.
• Process is fine: VERSION is bumped to 47, there is a CHANGELOG line, and it is English and anonymized. The hint text only grows by a few tokens.
• Nit, lib/dpcli/__init__.py:9: VERSION = 47# bump… lost the space before #. Restore 47 #.
• Nit, hooks/bash_guard.py:52: os.path.exists(target) resolves against the hook's cwd, and it doesn't expand ~ or $VAR. So cd sub && cat > existing << and cat > ~/x << now pass as "new". The guard is advisory, so this is acceptable. A future tweak could treat targets containing $ or ~ as existing.
• Nit, hooks/bash_guard.py:52: os is imported alongside subprocess, which is fine. The what == "cat > file <<" string compare is a bit brittle; consider a flag in the SHELL tuple.