Close privileged cleanup review gaps

test/shell.d/fixtures/privileged-heredoc/nested-parameter-default.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+# omarchy:heredoc-expands paths=none -- review regression fixture
+sudo tee /etc/omarchy/review.conf >/dev/null <<EOF
+ExecStart=${target:-$HOME/.local/bin/payload}
+EOF

test/shell.d/fixtures/privileged-heredoc/route-install-hop-literal.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cat <<EOF >/tmp/omarchy-review-unit
+[Service]
+ExecStart=$HOME/.local/bin/payload
+EOF
+sudo install -m 644 /tmp/omarchy-review-unit /etc/systemd/system/review.service

test/shell.d/fixtures/privileged-heredoc/route-prebody-escaped-pipeline.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+cat <<EOF | \
+  sudo tee /etc/omarchy/review.conf
+ExecStart=$HOME/.local/bin/payload
+EOF