Add RegEx guard to restrict SHA Goodie trigger

Addresses #778 by putting in an extra RegEx guard; it passes all of the tests, but it would be worthwhile to check if it is too restrictive/wide itself!
Shouldn't this be `[-\s1-9]+` so it matches `sha256` `sha 256` `sha-2` ? I guess it'd work already