Add RegEx guard to restrict SHA Goodie trigger

Addresses #778 by putting in an extra RegEx guard; it passes all of the tests, but it would be worthwhile to check if it is too restrictive/wide itself!