fix: shell precedence, missing escaping, and license badge drift

[worktrunk-bot]

Summary

Three fixes found during nightly code quality survey:

• Shell operator precedence in build_remove_command (process.rs): The || true for fsmonitor stop had incorrect precedence — it could swallow failures from the entire sleep 1 && git ... chain. Wrapped in { ...; } brace group to scope correctly.
• Missing shell escaping in WorktreePathOccupied hint (error.rs): Branch name and path in the suggested cd ... && git switch ... command were not shell-escaped, unlike other error hints that use shell_escape::escape().
• README license badge drift: Badge said "MIT" but Cargo.toml declares "MIT OR Apache-2.0".

Also opened issues for items that need more design consideration:

• wt step push: no --no-ff flag for manual step-by-step merge workflows #1579 — wt step push missing --no-ff flag
• get_config() swallows all git errors instead of distinguishing missing vs corrupt #1580 — get_config() swallows all git errors
• Rename get_* functions to bare nouns per CLAUDE.md naming conventions #1582 — get_* naming convention violations

Test plan

• Unit tests pass (test_build_remove_command, snapshot_worktree_path_occupied)
• cargo fmt and cargo clippy pass
• CI passes on all platforms

🤖 Generated with Claude Code

[worktrunk-bot]

Shell precedence fix and license badge are correct. One issue with the escaping fix:

format_path_for_display converts absolute paths to tilde-relative (/home/user/repo → ~/repo). shell_escape::escape treats ~ as unsafe (not in [A-Za-z0-9@%+=:,./-]), so ~/repo becomes '~/repo' — which prevents tilde expansion and breaks the cd command.

Fix: escape the raw path instead of path_display for the command, while keeping path_display for the descriptive text.