Add missing event tracking for whoami command, use command as category instead of CWD