Add a #refute_sh negative assertion for sh commands, and specs for it.

This is a simple addition for refuting `sh` commands.